OpenCTEM

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

Official Helm charts for deploying OpenCTEM on Kubernetes: API, web UI, sensors, migrations, with PVC or S3 attachment storage.

OpenCTEM CI/CD runner: per-tool scanner images (SAST, SCA, secrets, IaC, container) and GitHub/GitLab integrations

OpenCTEM Sensor: lightweight scanner runtime that runs Nuclei, Trivy, Semgrep, Betterleaks and recon tools close to your assets and reports results to the OpenCTEM platform.

Documentation for OpenCTEM: getting started, deployment, operations, architecture and integration guides. Published at docs.openctem.io.

Go SDK for OpenCTEM: API client, sensor runtime kit and ready-made scanner integrations (Nuclei, Trivy, Semgrep, CodeQL, subfinder, httpx, naabu, katana) with an SSRF-safe HTTP layer.

Signed, normalised vulnerability feed (NVD, OSV, CVE List, KEV, EPSS) for the OpenCTEM platform

Signed, normalised feed of public bug bounty and vulnerability disclosure programs (scope, rules, changes) for the OpenCTEM platform

CTIS (CTEM Ingest Schema): the open specification, JSON Schemas and Go types for sending assets, findings and SBOM dependencies from security tools to a CTEM platform.

Claude Code orchestration starter kit: supervisor (octl), agents, skills, guard hooks and token-budget rules for multi-agent development