Continuous Threat Exposure Management Maturity Model (CTEMMM)

NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.

Adds Tenable's CVE intelligence to third-party findings ingested into Tenable One. Enriches third-party CVE findings with Tenable plugin intel and on-demand AI explanations.

🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection

Bug bounty reconnaissance pipeline — 25+ tools, CVSS 3.1, HackerOne/Bugcrowd submission

MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.

The CVEasy open lab — runnable security harnesses, red-team probes, and experiments. Good-faith open source from CVEasy AI.

CTEM scanner over nmap: asset identity + exploitability (OSV/NVD/EPSS/KEV) + nuclei verification + detection-gap analysis

Network Access Control (NAC) + Security Information and Event Management (SIEM) + Continuous Threat Exposure Management (CTEM)

CVEasy threat intel payloads. Quarterly free drops. MIT licensed.

An Enterprise-Grade Attack Surface Management (ASM) & Open-Source Intelligence (OSINT) engine. Features autonomous dark web telemetry, automated Nuclei vulnerability scanning, real-time SEC financial risk scoring, and AI-driven executive reporting.

Synthetic vulnerability exposure management portfolio covering asset inventory, vulnerability risk scoring, patch SLA tracking, stale assets, EDR coverage, exceptions, remediation dashboards, and control mapping.

Vulnerability Management - AI - CTEM

RISKX - Research-first enterprise cyber-risk CLI: attack-surface discovery, vulnerability intelligence and risk prioritization. Evidence-backed, no guessing, offline-capable.

Simulation of elastic scattering in electron microscopy using the multislice algorithm. Simulations include various STEM and TEM techniques such as ADFSTEM, BFSTEM, ABFSTEM and CoM.

Continuous Threat Exposure Management - The Role of AI

KEV + EPSS enrichment and vendor-centric vulnerability triage utility for CTEM and vulnerability prioritization.

Open-source continuous threat exposure management (CTEM) platform

Zafran Security — independent third-party profile of a public API surface, by API Evangelist. Zafran Security is an AI-native threat exposure management (CTEM) platform for security teams buried in vulnerabilities and manual remediation work. It brings vulnerability findings together across an organization's existing scanners and tools to create a