diff --git a/capabilities/attack-surface-management/capability.yaml b/capabilities/attack-surface-management/capability.yaml
index d25eda82..1e757eba 100644
--- a/capabilities/attack-surface-management/capability.yaml
+++ b/capabilities/attack-surface-management/capability.yaml
@@ -1,6 +1,6 @@
 schema: 1
 name: attack-surface-management
-version: "2.0.2"
+version: "2.0.3"
 description: >
   External attack surface management with BBOT reconnaissance scanning,
   Neo4j graph database analysis, Shodan internet intelligence, and
diff --git a/capabilities/attack-surface-management/mcp/bbot.py b/capabilities/attack-surface-management/mcp/bbot.py
index 7b8ab231..6e51cd04 100644
--- a/capabilities/attack-surface-management/mcp/bbot.py
+++ b/capabilities/attack-surface-management/mcp/bbot.py
@@ -9,7 +9,7 @@
 #   "bbot",
 #   "aiosqlite>=0.21.0",
 #   "extractous~=0.3.0",
-#   "pyOpenSSL~=25.3.0",
+#   "pyOpenSSL>=25.3.0,<27",
 # ]
 # ///
 """BBOT reconnaissance and Neo4j graph query tools exposed as an MCP server.
diff --git a/capabilities/attack-surface-management/pyproject.toml b/capabilities/attack-surface-management/pyproject.toml
index 8e91962b..d12e547a 100644
--- a/capabilities/attack-surface-management/pyproject.toml
+++ b/capabilities/attack-surface-management/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "attack-surface-management"
-version = "2.0.2"
+version = "2.0.3"
 requires-python = ">=3.10"
 dependencies = [
     "badsecrets~=0.13.47",