HailBytes ASM Solution Brief
A procurement-ready overview for MSSPs and enterprise security teams. Every section links to the authoritative reference so your sales engineers, infosec reviewers, and channel partners can answer their own questions without a presales call.
At a glance
Pricing
$0.24/vCPU/hour through AWS or Azure Marketplace — no per-seat, per-asset, or per-scan fees. 30-day free trial with the software fee waived. Pricing →
Deployment
Bring-Your-Own-Cloud marketplace image running entirely in your own AWS or Azure account. Three reference topologies from single-VM to auto-scaling. Topologies →
Integration surface
40+ REST endpoints, a 30-tool MCP server for AI agents, WebSockets, and 17+ SIEM / ticketing / notification destinations. Integrations →
Data residency
Single-tenant by architecture; data never leaves your tenant, in the region you choose (incl. GovCloud and Azure Government). Trust center →
Integration & API
ASM exposes 40+ REST endpoints with OpenAPI docs and SHA-256-hashed API keys, a built-in Model Context Protocol server with 30 tools for AI-agent orchestration (Claude, Cursor, Windsurf, the Anthropic SDK), and live WebSocket scan updates.
- API reference & authentication. Endpoint catalog,
X-API-Keyauth, and scan-automation patterns. API reference → - MCP server. The full 30-tool reference and ready-to-paste client configs. MCP server reference →
- SIEM & SOAR. Native dispatchers for Splunk HEC, Microsoft Sentinel, CrowdStrike Falcon LogScale, Cortex XSIAM, QRadar (CEF), ServiceNow, Jira, and more. SIEM & integrations →
- Ticketing & on-call. Jira, ServiceNow, GitHub Issues, GitLab Issues, PagerDuty, Opsgenie. Ticketing →
- Identity. SAML 2.0, OIDC, LDAP/AD, and SCIM 2.0 provisioning. SSO & SCIM →
MSSP operations
ASM is multi-tenant at the workspace level and single-tenant at the deployment level — each client runs on its own instance, so client data is never cross-reachable. The billing engine attributes cost per client for resale invoicing.
- Per-client cost tracking. The billing dashboard reports per-project attributed cost, cost-per-finding, and analyst-hours saved — the numbers you need at a QBR. Model your portfolio →
- Per-tenant pricing. One instance per client at a flat infrastructure rate; resell at a 15–30% margin through AWS CPPO or Azure MPO. MSSP pricing →
- White-label operations. Provisioning, branding, and clean client offboarding. MSSP resources hub →
Technical requirements
- Compute. vCPU sizing scales with attack-surface scope (monitored targets × scan frequency), not headcount. Sizing guidance →
- Topology. Single instance, HA hot-hot, or unlimited-scale, each provisioned by published Terraform modules. Deployment topologies → · Terraform modules →
- Data store. PostgreSQL 16; co-located on single-VM, managed on HA and auto-scale shapes.
- Egress. Outbound to your configured destinations only (SIEM, threat-intel sources, notification channels). Scan data and target lists stay in your tenant. Procurement FAQ →
- Discovery coverage. The full scan-phase and tool inventory, including ICS/OT. Discovery coverage →
Security & compliance
- Deployment & data handling. BYOC single-tenant, region-of-choice residency, 99.5% vendor-side support SLA. Trust center → · Procurement FAQ →
- Compliance reporting. ISO/IEC 27001:2022, SOC 2, HIPAA, CIS Controls v8, IEC 62443, and more, rendered as product output. Compliance →
- Platform security. Source-available license, RBAC, PAM-backed secrets, supply-chain hardening. Security →
Customer proof
See how teams deploy HailBytes ASM in production, and how to get hands-on access for your own evaluation or channel reference.
Ready to evaluate?
Launch a 30-day free trial from the marketplace, or scope white-label terms with our team.