Organization¶

The Organization asset type in the OWASP Open Asset Model (OAM) represents a real-world legal entity, such as a corporation, nonprofit, or government agency, that owns or operates digital infrastructure. This asset type is critical for enabling attribution, relationship mapping, and grouping of Internet-exposed resources under a common ownership structure.

By representing organizations explicitly, the model supports a wide range of use cases including legal entity discovery, supply chain risk analysis, and asset attribution in large or decentralized environments. This asset often serves as the root from which other assets, such as IP ranges, domain names, and TLS certificates, are discovered and associated.

Each Organization includes structured metadata such as:

ID – A globally unique identifier for the organization within the graph.
Name – A commonly used name for the organization (e.g., Acme Corp).
Legal Name – The formally registered legal name (e.g., Acme Corporation, Inc.).
Founding Date – The year or date when the organization was established.
Jurisdiction – The legal or regulatory jurisdiction where the entity is registered (e.g., US-DE for Delaware, United States).
Registration ID – An optional formal identifier from a national registry (e.g., a company number or DUNS number).
Industry – A general classification of the organization’s primary business activity (e.g., Cloud Services, Financial Technology).
Target Markets – Geographic or sectoral regions the organization primarily serves.
Active – A boolean indicating whether the organization is currently operational.
Nonprofit – A boolean indicating whether the entity is a nonprofit organization.
Headcount – An estimate of the number of employees.

The Organization asset enables enrichment and correlation of digital infrastructure findings with publicly available business data. It plays a foundational role in external asset discovery workflows that begin from company metadata, such as legal names or registration information, and then pivot into technical assets like domains, netblocks, and services.

Organization Attributes¶

Attributes	Type	Description
`unique_id`	string	Unique identifier for the organization within the model
`name`	string	Common name used to identify the organization
`legal_name`	string	Official registered name of the organization
`founding_date`	string (date)	Date when the organization was founded (e.g., `2004-09-15`)
`jurisdiction`	string	Legal jurisdiction of incorporation (e.g., `US-DE`)
`registration_id`	string	Registered entity ID from a business registry
`industry`	string	Sector classification (e.g., `Cybersecurity`, `E-Commerce`)
`target_markets`	array of strings	Markets or regions the organization serves (e.g., `US`, `EU`)
`active`	boolean	Whether the organization is currently active
`non_profit`	boolean	Whether the organization is a nonprofit
`headcount`	number	Approximate number of employees

Organization Properties¶

Property Type	Property Name	Description
`SimpleProperty`	`last_monitored`	Tracks when a data source was last queried regarding this Organization
`SourceProperty`	Source Plugin Name	Indicates that the specified data source discovered this Organization

Organization Outgoing Relations¶

graph TD
org["Organization"]
ident["Identifier"]
idrel@{ shape: braces, label: "id" }
org --o idrel
idrel --> ident

loc["Location"]
locrel@{ shape: braces, label: "legal_address
hq_address
location" }
org --o locrel
locrel --> loc

org2["Organization"]
orgrel@{ shape: braces, label: "subsidiary
org_unit" }
org --o orgrel
orgrel --> org2

url["URL"]
urlrel@{ shape: braces, label: "website
social_media_profile" }
org --o urlrel
urlrel --> url

account["Account"]
acctrel@{ shape: braces, label: "account" }
org --o acctrel
acctrel --> account

person["Person"]
member@{ shape: braces, label: "member" }
org --o member
member --> person

funding@{ shape: braces, label: "funding_source" }
org --o funding
funding --> org2
funding --> person

Relation Type	Relation Label	Target Assets	Description
`SimpleRelation`	`id`	`Identifier`	Links the organization to alternative identifiers
`SimpleRelation`	`legal_address`	`Location`	Links the organization to its legal street address
`SimpleRelation`	`hq_address`	`Location`	Links the organization to the street address of its headquarters
`SimpleRelation`	`location`	`Location`	Links the organization to the street address of an alternative location
`SimpleRelation`	`subsidiary`	`Organization`	Links the organization to one of its child organizations
`SimpleRelation`	`org_unit`	`Organization`	Links the organization to one of its sectors or departments that is externally visible
`SimpleRelation`	`account`	`Account`	Links the organization to one of its digital or financial accounts
`SimpleRelation`	`member`	`Person`	Links the organization to one of its employees identified as a `Person` asset
`SimpleRelation`	`website`	`URL`	Links the organization to its primary website or one dedicated to a product
`SimpleRelation`	`social_media_profile`	`URL`	Links the organization to one of its social media profiles
`SimpleRelation`	`funding_source`	`Organization`, `Person`	An `Organization` or `Person` that has invested in this company previously