Cloud-native security tooling on AWS and Azure for 3,000+ organizations. HailBytes SAT, HailBytes ASM, on Azure and AWS.

github

David McHale  • Peerlist

<h3>HailBytes SAT is a comprehensive Security Awareness Training Platform designed for enterprises, MSSPs, and managed security teams. It offers robust phishing simulation capabilities, enabling organizations to test employee resilience against cyber threats. The platform provides post-click coaching, detailed executive reporting, and multi-tenant controls, making it ideal for managed service providers. Key features include broad identity and integrations support, with seamless deployment options on AWS or Azure.</h3><ul><li>Phishing Simulations: Run unlimited active simulations with over 45 industry-specific templates, QR lure coverage, and cloned template support. Includes AI-assisted campaign generation via MCP tooling.</li><li>User Reporting &amp; Coaching: Route user reports faster and provide immediate post-click coaching.</li><li>Advanced Analytics: Gain insights into training effectiveness with an engagement funnel, threat trend analysis (12w/26w/monthly), KPI sparklines with WoW deltas, and a repeat-clicker watchlist. Toggle between click-rate and resilience views for a balanced perspective.</li><li>Executive Reporting: Generate board-ready PDF reports with customizable branding, suitable for C-level executives.</li><li>Identity &amp; Access Management: Supports Username/password with TOTP MFA, OIDC SSO (Microsoft Entra ID, Google Workspace), SAML 2.0 (Okta, OneLogin, etc.), and SCIM 2.0 provisioning for automated user management.</li><li>Multi-Tenancy: Offers white-labeling capabilities for MSSPs, per-tenant branding, seat caps, and strict data isolation between organizations.</li><li>Deployment Flexibility: Deployable as a single VM, HA pair, or auto-scaling group on AWS or Azure. Supports Azure Government and air-gapped environments.</li><li>Set-and-Forget Programs: Configure recurring campaigns and scheduled report delivery to clients, automating the training and reporting process.</li><li>Compliance &amp; Security: Built on a hardened Ubuntu 24.04 baseline with AES-256-GCM encryption, CSRF protection, and compliance mapping for SOC 2.</li></ul>HailBytes SAT streamlines security awareness training, reduces manual effort, and provides clear, actionable insights into an organization's security posture.

HailBytes SAT | Security Awareness Training

<h3>Automated Reconnaissance and Attack Surface Management</h3>HailBytes ASM is a powerful platform designed for pentest firms and MSSPs, offering automated reconnaissance and continuous attack surface management. It streamlines the process of identifying and monitoring an organization's external attack surface, replacing manual, script-based methods with a robust, integrated solution.<ul><li>Automated Reconnaissance: Orchestrates over 30 open-source tools, including Subfinder, Amass, Nmap, Nuclei, and more, across a 7-phase pipeline to discover subdomains, open ports, services, and technologies.</li><li>AI-Agent Orchestration: Features a built-in MCP server that allows AI coding and pentest agents to initiate scans, query findings, and chain campaigns programmatically, enhancing efficiency and scalability.</li><li>Continuous Monitoring: Provides scheduled monitoring with real-time updates and alerts via Slack, Microsoft Teams, Discord, Telegram, Lark, and Twilio SMS, ensuring timely notification of new exposures.</li><li>Deployment Flexibility: Deployable in minutes from the AWS or Azure Marketplace (including Azure Government), running as a single VM, HA pair, or auto-scaling group, ensuring data resides within your own cloud environment with zero vendor lock-in.</li><li>Triage-First Dashboard: A redesigned interface for MSSP operators, featuring diff-from-last-scan triage banners, status-filtered findings, real-time scan progress, and attack-path visualization.</li><li>Compliance Frameworks: Supports over 10 compliance frameworks, including PCI DSS, SOC 2, NIST CSF, ISO 27001, and HIPAA, generating exportable evidence reports.</li><li>OWASP Top 10 Hardened: Addresses common vulnerabilities like IDOR, injection flaws, and SSRF, with structured security event logging.</li><li>Enterprise &amp; Security Upgrades: Built with a modern stack including Django 5.2 LTS, Playwright for UAT, and robust security features like RBAC, 2FA, and audit logging.</li><li>AI-Powered Analysis: Integrates with OpenAI or local Ollama models for air-gapped vulnerability assessment, exploitation guidance, and automated reporting, with GPU acceleration support.</li><li>Data Privacy: All scan data remains within your AWS or Azure account, ensuring true data sovereignty and control over encryption, retention, and access policies.</li></ul>HailBytes ASM offers a cost-effective and powerful alternative to commercial ASM platforms, providing comprehensive attack surface management capabilities tailored for modern security teams.