https://github.com/oasm-platform/oasm-assistant
Smart assistant for threat monitoring, attack prevention, and web protection.
https://github.com/oasm-platform/oasm-assistant
ai-agent ai-assistant ai-for-security cybersecurity oasm oasm-platform
Last synced: 5 months ago
JSON representation
Smart assistant for threat monitoring, attack prevention, and web protection.
- Host: GitHub
- URL: https://github.com/oasm-platform/oasm-assistant
- Owner: oasm-platform
- License: mit
- Created: 2025-08-18T05:06:07.000Z (10 months ago)
- Default Branch: main
- Last Pushed: 2026-01-15T14:49:17.000Z (5 months ago)
- Last Synced: 2026-01-15T15:50:59.867Z (5 months ago)
- Topics: ai-agent, ai-assistant, ai-for-security, cybersecurity, oasm, oasm-platform
- Language: Python
- Homepage:
- Size: 18.4 MB
- Stars: 13
- Watchers: 0
- Forks: 1
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 🤖 OASM ASSISTANT
**AI-Powered External Attack Surface Management**
[](https://oasm.dev)
[](https://opensource.org/licenses/MIT)
[](https://www.python.org/downloads/)
---
## Overview
OASM Assistant is an AI-powered security platform that automates external attack surface management using multi-agent architecture with LangGraph.
### Key Features
- 🤖 **Multi-Agent AI System** - Specialized agents for security tasks
- **Threat Intelligence Agent** - IOC correlation, attack prediction, threat monitoring
- **Analysis Agent** - Vulnerability assessment, compliance checking (OWASP, CWE, PCI-DSS, ISO 27001, etc)
- **Incident Responder Agent** - Attack detection, automated response, forensic analysis
- **Orchestrator Agent** - Workflow coordination, natural language interface
- 🔍 **Threat Intelligence** - Real-time monitoring and analysis
- 🛡️ **Vulnerability Management** - Automated scanning and prioritization
- 📊 **Compliance Checking** - OWASP, CWE, PCI-DSS, ISO 27001, etc
- ⚡ **Incident Response** - Automated detection and response
- 🔧 **Utility Tools** - Domain Classifier, Nuclei Template Generator, Issue Resolver
---
## Quick Start
```bash
# Clone repository
git clone https://github.com/oasm-platform/oasm-assistant.git
cd oasm-assistant
# Configure
cp .env.example .env
nano .env # Edit environment variables
# Start services
docker compose up -d oasm-assistant-postgresql oasm-assistant-app oasm-assistant-searxng oasm-assistant-ollama
# Pull model for Ollama (if using Ollama LLM)
docker exec -it oasm-assistant-ollama ollama pull llama3
```
📖 **[Detailed Installation Guide](docs/INSTALLATION.md)**
---
## Architecture
### 🤖 OASM ASSISTANT (AI Layer)
**Intelligent automation layer** built on top of [OASM Platform](https://github.com/oasm-platform)
**Components:**
- **Multi-Agent System** - Threat Intel • Analysis • Incident Response • Orchestrator
- **LLM Providers** - Local (Ollama, vLLM, SGLang) • Cloud (OpenAI, Claude, Gemini)
- **AI Tools** - RAG System (pgvector) • SearXNG • Domain Classifier • Nuclei Generator • Issue Resolver
**Integration:**
- **gRPC** - High-performance communication with Core API
- **MCP Protocol** - Real-time asset context and knowledge retrieval
- **PostgreSQL** - Vector search for RAG (Retrieval Augmented Generation)
### ⚙️ OASM CORE (Management Platform)
**Central platform** for external attack surface management → [View Core Platform](https://github.com/oasm-platform/open-asm)
**Components:**
- **Web Console** - Management dashboard
- **Core API & MCP Server** - REST, gRPC, MCP protocols
- **Database** - PostgreSQL, Redis, Kafka
- **Distributed Workers** - Security scanning execution
**External Resources:**
- **Internet/Attack Surface** - Target systems
- **Knowledge Base** - Nuclei Templates, OWASP, MITRE ATT&CK, etc
---
## Documentation
### 📚 Getting Started
- **[Installation Guide](docs/INSTALLATION.md)** - Docker setup, GPU configuration
- **[Configuration Guide](docs/CONFIGURATION.md)** - Environment variables, provider setup
- **[LLM Deployment](docs/LLM_DEPLOYMENT.md)** - Complete LLM & embedding setup
### 🔧 Advanced
- Architecture (coming soon)
- API Reference (coming soon)
- Development Guide (coming soon)
---
## Technology Stack
- **AI Framework**: LangGraph, LangChain
- **LLM Providers**: Ollama, vLLM, SGLang, OpenAI, Anthropic, Google
- **RAG**: pgvector (vector search), BM25 (keyword search)
- **Communication**: gRPC, MCP (Model Context Protocol)
- **Storage**: PostgreSQL with pgvector extension
---
## License
MIT License - see [LICENSE](LICENSE) file.
---
## Disclaimer
**For defensive security only.** Use only on systems you own or have permission to test.
---
**Built by Team OASM-Platform** • [Documentation](docs/) • [Issues](https://github.com/oasm-platform/oasm-assistant/issues)