cvENGINE

Open-source external attack surface management platform that discovers an organization's exposed domains, subdomains, IPs, ports, versions and technologies, then matches them against actively exploited CVEs and confirms findings with read-only reproduction checks and AI triage. Runs as a single Docker Compose stack and uses bbot and naabu for discovery.