Both products are listed and transactable in AWS Marketplace and Azure Marketplace — deploy into your own cloud account, billed through your existing cloud agreement.
Choose Your Cloud Platform
Microsoft Azure
Launch from Azure Marketplace with ARM templates. Utilize Azure VMs, Database for PostgreSQL, and integrated monitoring for seamless operations.
Available Products:
- HailBytes SAT (VM + Azure Database + SendGrid)
- HailBytes ASM (VM + PostgreSQL + Redis Cache)
Deployment Options:
- Standard VM (Cost-optimized)
- GPU VM (AI-powered HailBytes ASM)
- VM Scale Sets (Enterprise HA)
Amazon Web Services (AWS)
Deploy HailBytes products directly from AWS Marketplace with one-click CloudFormation templates. Leverage EC2, RDS, and SES for enterprise-scale deployments.
Available Products:
- HailBytes SAT (EC2 + RDS + SES)
- HailBytes ASM (EC2 + PostgreSQL + ElastiCache)
Deployment Options:
- Single-instance (Small teams)
- High-availability (Multi-AZ)
- Auto-scaling (Enterprise)
Three Deployment Topologies
The same marketplace AMI / Azure image deploys into one of three reference topologies. Pick the shape that matches your uptime requirements and team size — the per-vCPU meter rate is identical across all three. Every deployment is Bring-Your-Own-Cloud: the marketplace meter charges for software only, and your AWS or Azure account is billed separately for the VM, storage, and networking. The infrastructure figures below are us-east-1 on-demand list estimates from our AWS HA reference design and will vary by region, reserved-instance coverage, and data volume.
Single Instance
One marketplace VM with an encrypted data volume. Fastest path from subscribe to running. Suitable for evaluation, proofs of concept, small teams, and air-gapped Azure Government deployments.
What ships:
- 1× EC2 / Azure VM (Marketplace AMI / image)
- Encrypted gp3 / Premium SSD data volume
- SSM Session Manager / Azure RBAC access
- Optional daily EBS / managed-disk snapshots
- Co-located Postgres on the same VM
Indicative cost (us-east-1, procurement-grade):
~$1,680/month all-in — $1,400 software meter for an 8 vCPU instance, plus ~$280/month of infrastructure in your own cloud account
High Availability
Two active/active VMs across availability zones behind a load balancer, with managed Postgres and a shared Redis session store. The recommended shape for any production deployment with a formal uptime SLA — higher-education consortia, MSPs, regulated industries.
What ships:
- 2× VMs across two AZs / zones
- ALB (AWS) / Standard LB (Azure)
- RDS Multi-AZ / Postgres Flex zone-redundant
- ElastiCache / Azure Cache for Redis (Multi-AZ)
- S3 / Storage Account backup bucket with Object Lock
- Pre-patch + post-patch SSM / Run Command verifiers
- Optional WAF (customer-supplied web ACL / policy)
Indicative cost (us-east-1, procurement-grade):
~$3,680/month all-in — $2,800 software meter for 16 vCPU across the pair, plus ~$880/month of infrastructure (two 8 vCPU VMs, load balancer, Multi-AZ Postgres, Multi-AZ Redis, cross-AZ transfer) — roughly 2.2× a single instance because HA adds managed Redis and Postgres
Auto-Scaling
Horizontal Auto Scaling Group / VM Scale Set with read replicas and full observability. The shape MSSPs, large enterprises, and bursty workloads (large-population training, on-demand scan campaigns) deploy. Scales horizontally without a topology change.
What ships:
- Auto Scaling Group / VM Scale Set of identical 8-vCPU nodes (2 min, 20 max default)
- ALB / App Gateway with optional WAF
- RDS primary + 2× read replicas / Flex Server replicas
- ElastiCache / Azure Cache for Redis
- S3 / Storage Account backup bucket
- Rolling instance refresh with auto-rollback on 5xx
- CloudWatch / Azure Monitor alerts to SNS / Action Group
Indicative cost (us-east-1, procurement-grade):
From $2,800/month of software at the two-node baseline — 2 × 8 vCPU, so 16 metered vCores — and the meter scales linearly from there: every additional 8-vCPU node adds $1,400/month. Infrastructure sits on top and does not scale linearly, because the load balancer, Redis, and the database tier with its read replicas are shared across the fleet. For verified per-shape infrastructure figures see COST_SHAPES.md.
Customer shapes — who runs which topology
The shape mix below reflects what actually deploys, not just what theoretically could. Same per-vCPU meter rate across all three; the delta is infrastructure shape, not licensing.
Single instance — typically
- SMB security teams (50–500 employees) running quarterly phishing drills
- Pen-test firms running 1–3 client engagements at a time (HailBytes ASM)
- Internal red teams at mid-market companies
- Bug bounty researchers and small bounty programs
- AWS GovCloud / Azure Government deployments with single-AZ posture
- Higher-ed PoCs running under 5,000 targets before broader rollout
- Air-gapped subnets where redundancy is supplied by snapshots, not HA
- CI-driven ASM scans against the customer's own assets
HA hot-hot — typically
- Education consortia (HEAnet / Asiera-shape — one central tenant routing N member institutions, 15–25k targets per member, training campaigns staggered across the academic year)
- Mid-large enterprises (1k–10k employees) with formal IT uptime SLAs
- Healthcare orgs needing HIPAA-grade availability
- Financial services / fintech with regulatory uptime requirements
- Regional MSSPs operating one instance for a book of client organizations that receive scheduled reports
- Government contractors with audit-trail SLAs and 24/7 client portals
- Sovereign-cloud deployments (Azure Government, AWS GovCloud) needing zone redundancy
- Pen-test firms running concurrent engagements across time zones
Auto-scaling — typically
- Large MSSPs operating the platform across a large client book under their own brand
- Mega-enterprise SecOps (25k+ employees, multi-region rollout, global IT)
- Channel partners running the platform under their own brand for many customer organizations
- National research and education networks (mega-consortia, 40+ institutions, 500k+ targets)
- Pen-test firms running parallel campaigns for many concurrent clients (HailBytes ASM)
- DevSecOps platform teams running continuous ASM across hundreds of projects
- Bug bounty platforms with multiple programs and bursty traffic
- Seasonal phishing campaigns (tax season for finance firms, holiday season for retail) where load is genuinely unpredictable
One note on the multi-client shapes. One instance carries multiple client organizations when the MSSP operates the platform, with row-level data isolation, per-client sending identities, and per-client hostnames. Clients that require their own branding, their own identity provider, or self-service administration need a dedicated instance. We publish no clients-per-instance figure — size on throughput, and see MSSP pricing for the per-client economics.
A quick rule of thumb: pick Single instance when redundancy is satisfied by snapshots; HA hot-hot when an availability-zone outage is a procurement-blocker; Auto-scaling when peak load is materially higher than steady state and you'd otherwise be over-provisioning a fixed HA pair.
Full module documentation, side-by-side cost shapes, and the per-vCPU marketplace meter table are in COST_SHAPES.md.
Deploy with Confidence
One-click deployment to AWS or Azure with pre-configured templates and automated setup
Azure Marketplace Deployment
Launch from Azure Marketplace with ARM templates. Integrated with Azure Active Directory, Key Vault, and Monitor for enterprise security and compliance.
Deploy Now →
AWS Marketplace Deployment
Deploy directly from AWS Marketplace with CloudFormation templates. Pre-configured security groups, IAM roles, and compliance-ready infrastructure in minutes.
Deploy Now →Your first login
On first boot the VM writes your initial admin credentials to disk. SSH in as ubuntu (AWS) or azureuser (Azure) and read them:
cat ~/hailbytes-sat-initial-credentials.txtThe file contains your dashboard URL, the admin username, and an initial password derived from the VM’s public IP. Log in, change the password, enable MFA, then delete the file.
Transparent Pricing
Simple Marketplace Pricing
One software meter on your cloud marketplace bill. Bring your own cloud for the infrastructure.
8 vCPU minimum • 32GB memory minimum
Starting at $1,400/month for software ($16,800/year)
Cloud infrastructure billed separately by your provider — roughly $280/month at 8 vCPU
30-day free trial available, infrastructure included on the 8 vCPU entry size
- No hidden fees or license costs
- Scale up or down anytime
- Cancel anytime - no contracts
- Save up to 40% with annual commitment — 30% (1-year), 35% (2-year), 40% (3-year)
| Plan | Size | Hourly | Monthly (730 hrs) | Annual list | 1-yr −30% | 2-yr −35% | 3-yr −40% |
|---|---|---|---|---|---|---|---|
| Essential | 8 vCPU | $1.92 | $1,400 | $16,800 | $11,760 | $10,920 | $10,080 |
| Professional | 16 vCPU | $3.84 | $2,800 | $33,600 | $23,520 | $21,840 | $20,160 |
| Enterprise Plus | 32 vCPU | $7.68 | $5,610 | $67,300 | $47,110 | $43,745 | $40,380 |
| MSP / Consortium | 48 vCPU | $11.52 | $8,410 | $100,900 | $70,630 | $65,585 | $60,540 |
| MSP / Consortium (large) | 64 vCPU | $15.36 | $11,210 | $134,600 | $94,220 | $87,490 | $80,760 |
| Beyond the ladder (shard by organization) | above 128 metered | Quote via partner desk | |||||
Software fee only, at $0.24/vCPU/hour × 8,760 hours. Deployments are Bring-Your-Own-Cloud: your AWS or Azure account is billed separately by the cloud provider for the VM, storage, and networking. Term discounts are delivered as a published annual plan (self-serve); private offer for negotiated terms and channel resale.
Pricing & ROI Calculators
Estimate your monthly costs and calculate your return on investment.
The meter counts vCores, not machines, so an HA pair bills at twice its tier — and HA therefore costs exactly what the equivalent single-VM capacity costs. A 2 × 8 pair bills the same as one 16 vCPU VM. Pairs are always two identical VMs.
Sizing is throughput, not a seat cap, so roster size does not change what you pay — users are unlimited at every size. It does change which tier you need, and which workload you run matters more than the headcount: a training roster is a materially bigger box than the same number of phishing targets, because each active learner streams video or SCORM, triggers a certificate render, and adds rows the one-minute automation sweep walks. The tiers here are stated for training, which is the default — training ships with the phish server. Up to 10,000 learners sizes at 8 vCPU; 10,001–35,000 at 16; 35,001–100,000 at 32.
Cost Breakdown
Software fee only, computed from the meter at $0.24 × metered vCores × 730 hours and rounded to the nearest $10 — the 8 vCPU meter runs $1,401.60. Deployments are Bring-Your-Own-Cloud, so your AWS or Azure account is billed separately for the VM, storage, and networking — roughly $35/vCPU/month, about $280/month alongside an 8 vCPU instance, and twice that across an HA pair.
Annual commitments save up to 40% off the marketplace rate — 30% for 1 year paid upfront, 35% for 2 years, 40% for 3 years, published as a self-serve annual plan alongside the hourly one. Private offers (AWS CPPO / Azure MPO) are for negotiated terms and channel resale. Contact sales for a negotiated term.
Include phishing simulation, ASM tools, and related software
Simple 3-Step Deployment
Step 1: Choose Template
Select your product and deployment size. Pre-configured templates for small teams, mid-size orgs, and enterprises.
Step 2: Configure Resources
Set instance sizes, database options, and networking. Defaults work great, or customize for your needs.
Step 3: Deploy & Use
Launch deployment (5-10 minutes). Access your security platform immediately. Complete documentation and support included.
Web-first access — no SSH required
After deployment completes, browse to the instance’s public IP or DNS hostname to reach the admin console — the web UI is the primary entry point. HailBytes SAT writes its initial admin credentials to ~/hailbytes-sat-initial-credentials.txt (mode 600) on first boot, retrievable through your cloud console’s Run Command / SSM Session Manager without opening an inbound SSH port. SSH stays available as an optional advanced step for operators who want it.
Watch the Demos Before You Deploy
Two short product runs - the same product you'll spin up from the marketplace.
HailBytes SAT
4-minute end-to-end product run.
HailBytes ASM
11-minute end-to-end product run.
Azure Deployment Details
HailBytes SAT on Azure
Quick Deploy (5 min):
- VM: Standard_D8s_v5 (8 vCPU, 32GB RAM)
- Azure Database for PostgreSQL (Flexible Server)
- SendGrid integration for email
- Application Gateway with WAF
- Azure Monitor for logging
Est. Cost: ~$1,680/month all-in for a single 8 vCPU instance, ~$3,680/month for the HA pair — software meter plus infrastructure in your own Azure account
HailBytes ASM on Azure
Quick Deploy (5 min):
- VM: Standard_D8s_v5 (8 vCPU, 32GB RAM)
- Azure Database for PostgreSQL 18 (Flexible)
- Azure Cache for Redis (Premium)
- Blob Storage for screenshots
- Optional: NC6s_v3 GPU VM for AI (V100)
Est. Cost: ~$1,680/month all-in without GPU; ~$2,480–$3,680/month with the optional NC6s_v3 GPU VM
AWS Deployment Details
HailBytes SAT on AWS
Quick Deploy (5 min):
- EC2 Instance: m6i.2xlarge (8 vCPU, 32GB RAM)
- RDS PostgreSQL: db.m6i.large (4GB RAM)
- Amazon SES for email delivery
- Application Load Balancer
- Auto Scaling Group (optional)
Est. Cost: ~$1,680/month all-in for a single 8 vCPU instance, ~$3,680/month for the HA pair — software meter plus infrastructure in your own AWS account
HailBytes ASM on AWS
Quick Deploy (5 min):
- EC2 Instance: m6i.2xlarge (8 vCPU, 32GB RAM)
- RDS PostgreSQL 18: db.r5.large (16GB RAM)
- ElastiCache Redis for caching
- S3 for screenshots and storage
- Optional: GPU instance for AI (p3.2xlarge)
Est. Cost: ~$1,680/month all-in without GPU; ~$2,480–$3,680/month with the optional p3.2xlarge GPU instance
Deployment Support
Documentation
Step-by-step deployment guides, architecture diagrams, and troubleshooting for both AWS and Azure platforms.
View Docs →Product Demos
Watch full walkthroughs of HailBytes SAT and HailBytes ASM in action, from first login through campaign launch and continuous monitoring.
Professional Services
Need help? Our team offers deployment assistance, custom configurations, and enterprise architecture consulting.
Contact Us →Hands-On Security Training
Master your security tools with comprehensive tutorials and training resources.
HailBytes SAT Phishing Simulation Tutorials
Learn how to deploy, configure, and run effective phishing campaigns with HailBytes SAT. From basic setup to advanced campaign strategies and compliance reporting.
- Initial deployment and configuration
- Creating phishing templates
- Managing user groups and campaigns
- Analytics and reporting best practices
- Integration with training programs
HailBytes ASM Reconnaissance Tutorials
Master automated reconnaissance and attack surface management with HailBytes ASM. Comprehensive guides from deployment to advanced scanning techniques.
- Platform deployment and initial setup
- Configuring reconnaissance engines
- Scan automation and scheduling
- Vulnerability correlation and reporting
- API integration and custom workflows
Free Guide: AWS Marketplace Procurement for Security Tools
Committed spend, private offers, security review, and the procurement checklist — how to buy security tooling through AWS/Azure Marketplace in weeks, not months. Instant access.
Ready to deploy?
Choose your platform and launch HailBytes security tools in minutes.
30-day free trial • Standard support included • No credit card required