Getting started
OpenSourceOM runs as a self-hosted stack. You will deploy collectors in your environment, ingest cloud inventory and security signals, and explore findings in the security graph UI.
Prerequisites
- Docker 24+ and Docker Compose
- Read-only cloud credentials for AWS, Azure, or GCP
- 4 vCPU / 8 GB RAM minimum for a small pilot
Quick start
git clone https://github.com/OpenSourceOM/core.git
cd core
cp .env.example .env
docker compose up -d
# Open the UI (default)
open http://localhost:8080 Connect a cloud account
Create a read-only IAM role (AWS), service principal (Azure), or workload identity (GCP) and paste the credentials into the setup wizard. Collectors begin syncing assets within minutes.
Next steps
- Read about the security graph
- Review the architecture before scaling to production