Self-hosted, graph-native cloud security. Map assets, identities, and exposures — then prioritize what attackers can actually reach.
git clone https://github.com/OpenSourceOM/core.git
cd core && cp .env.example .env && docker compose up -d
go build -o om ./cmd/om && ./om migrate && ./om scan demo && ./om rules run
open http://localhost:8080| Repo | Description |
|---|---|
| core | Platform — collectors, graph engine, CSPM rules, API, console |
| website | Docs and marketing site |
- Graph-native — attack path analysis, identity blast radius, exposure-aware prioritization
- Multi-cloud — AWS, Azure, GCP, and Kubernetes
- Self-hosted — run in your VPC, audit the code, Apache-2.0 licensed
- Transparent — no black-box risk scores
Start with the core roadmap and open a discussion before large changes.
Apache-2.0