OpenKAT Services
OpenKAT is the open-source vulnerability monitoring framework originally developed by the Dutch Ministry of Health (VWS), now maintained by Stichting LibreKAT. Hasecon reviews, tests and merges code changes in the official repository, which means we know the platform from the inside.
What we offer
- Implementation: on-premise or cloud installation, fully configured for your infrastructure.
- Development: custom boefjes (scan modules), API integrations and contributions upstream. See our developer guide.
- Managed service: we run OpenKAT in your environment: updates, monitoring and reporting.
- Training & support: admin training and SLA-based support by active contributors.
Rather consume it as a service?
Exposentry, our SaaS product, delivers continuous attack surface monitoring built on OpenKAT: EU-hosted, no installation, with monthly evidence reports sealed with RFC 3161 timestamps for your NIS2 file.
Getting started
Start with our complete installation guide, or book a free 30-minute call (English spoken).
Active in the OpenKAT source
That involvement in the source code means we know the platform inside out.
- core maintainer
- We review, test and merge code changes into the main branch of the official repository; over sixty of our own pull requests have been merged.
- security
- Redesigned CSP checking and removed a ReDoS vulnerability from the platform.
- architecture
- Migrated the Bytes messaging layer to aio-pika and co-authored RFDs on finding lifecycle and scan scope.
- detection
- Extended the LeakIX integration and bound CVE findings to the assets running the software.