OpenSourceOM

Self-hosted, graph-native cloud security. Map assets, identities, and exposures — then prioritize what attackers can actually reach.

git clone https://github.com/OpenSourceOM/core.git
cd core && cp .env.example .env && docker compose up -d
go build -o om ./cmd/om && ./om migrate && ./om scan demo && ./om rules run
open http://localhost:8080

Repositories

Repo	Description
core	Platform — collectors, graph engine, CSPM rules, API, console
website	Docs and marketing site

Why OpenSourceOM?

• Graph-native — attack path analysis, identity blast radius, exposure-aware prioritization
• Multi-cloud — AWS, Azure, GCP, and Kubernetes
• Self-hosted — run in your VPC, audit the code, Apache-2.0 licensed
• Transparent — no black-box risk scores

Links

• Website
• Getting started
• Architecture
• Roadmap

Contributing

Start with the core roadmap and open a discussion before large changes.

License

Apache-2.0