HailBytes
Change the repository type filter
All
Repositories list
22 repositories
- Official Terraform modules for deploying HailBytes ASM and SAT on AWS and Azure. Single VM, HA hot-hot, and auto-scaling tiers. Requires active HailBytes Market…
security-headers
PublicAnalyze HTTP security headers for your web application. A-F grading, per-header findings, and remediation — as a library or CLI.mcp-security-scanner
PublicScans Model Context Protocol (MCP) server configurations for common security issues: overprivileged tools, missing auth, prompt injection surface, unsafe defaul…hailbytes-api-docs
PublicOfficial API and MCP server documentation for HailBytes ASM (Attack Surface Management) and HailBytes SAT (Security Awareness Training). OpenAPI 3.1 specs, inte…- Comprehensive NIST CSF-aligned security policy templates for SMBs. Ready-to-use policies covering incident response, data protection, infrastructure security, a…
vulnerability-calculator
PublicZero-dependency web component for sizing vulnerability scanning infrastructure. Port of the PHP calculation engine to vanilla JS.- A practical 30-day MSSP client onboarding checklist with templates and tooling guidance.
- Professional email templates and landing pages for employee security awareness phishing simulations using GoPhish. Ready-to-deploy campaigns with realistic scen…
sbom-diff
PublicDiff two CycloneDX or SPDX SBOMs and produce human-readable change reports. Highlights added, removed, upgraded dependencies and new CVEs.pentest-calculator
PublicZero-dependency web component for scoping and estimating penetration testing engagements. Works in Hugo, React, Vue, or plain HTML.phishing-template-linter
PublicLints GoPhish-format email templates for deliverability, tracking, merge tags, and spam triggers. Companion to HailBytes SAT and gophish-training-templates.mcp-server-template
PublicOpinionated TypeScript scaffold for production MCP servers with built-in auth, rate limiting, audit logging, and observability. npx @hailbytes/create-mcp-server…caiq-lite
PublicProgrammatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.asm-scope-parser
PublicParses and normalizes attack surface scope definitions: IP ranges, CIDR, domains, wildcards, and exclusions. Framework-agnostic, zero-dependency.security-roi-calculator
PublicZero-dependency web component for calculating security awareness training ROI. Works in Hugo, React, Vue, or plain HTML.password-analyzer
PublicZero-dependency web component for password strength analysis. Works in Hugo, React, Vue, or plain HTML.cvss-calc
PublicZero-dependency CVSS v3.1 and v4.0 calculator. Parse and score vulnerability vectors as a library or web component.- Open-source dashboards and scripts for measuring phishing simulation program effectiveness.
asm-tool-comparison
PublicHonest comparison of open-source and commercial attack surface management tools.rengine_burp_integration
PublicA Python tool that seamlessly integrates reNgine and reNgine-ng reconnaissance data with Burp Suite Professional for enhanced web application security testing …github-dependency-fetch
PublicPython CLI tool to use the requests library and pyCookieSteal to impersonate your GitHub session and export your dependency insights in a text format.
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.