Overview

Product video
Enterprise Attack Surface Management & Automated Reconnaissance
reNgine Cloud is an enterprise-grade automated reconnaissance platform that transforms weeks of manual security testing into hours through intelligent automation, AI-powered analysis, and continuous monitoring.
What You Get
- 20+ integrated security tools orchestrated in automated workflows
- AI-powered vulnerability analysis with GPT-4 and local LLM support
- Continuous attack surface monitoring with automated change detection
- Multi-project collaboration with role-based access control
- Container-based deployment with GPU support for AI workloads
- REST API for automation and CI/CD integration
- Standard support included (3-5 day response) - upgrade available
Perfect For
- Penetration testers conducting client reconnaissance
- Red teams automating reconnaissance workflows
- Security consultancies managing multiple client assessments
- Corporate security teams monitoring attack surface continuously
- DevSecOps teams integrating security into CI/CD pipelines
Key Features
Automated Reconnaissance Workflow
- Subdomain Discovery: Subfinder, Amass, Assetfinder integration
- Port Scanning: Nmap, Masscan automated scanning
- Technology Detection: Wappalyzer, WhatWeb, Webanalyze
- Vulnerability Scanning: Nuclei templates (10,000+ CVEs)
- Directory Bruteforcing: FFUF, Dirsearch, GoBuster
- Screenshot Capture: Automated visual reconnaissance
- DNS Analysis: Comprehensive DNS enumeration
- Certificate Transparency: CT log monitoring
AI-Powered Analysis
- GPT-4 Integration: Cloud-based AI vulnerability assessment
- GPU Acceleration: Optional GPU instances for faster AI processing
- Automatic Report Generation: AI-generated executive summaries
- Exploitation Guidance: Context-aware attack suggestions
Continuous Monitoring
- Scheduled Scans: Automated periodic reconnaissance
- Change Detection: Alert on new subdomains, endpoints, vulnerabilities
- Historical Tracking: Trend analysis and attack surface growth visualization
- Real-time Notifications: Slack, Discord, Telegram integration
- Mean Time to Discovery: Catch vulnerabilities before attackers
Collaboration & Workflow
- Multi-Project Support: Isolate client engagements or business units
- Role-Based Access: Admin, Auditor, Viewer permissions
- Team Collaboration: Shared notes and findings
- Workspace Isolation: Secure multi-tenant architecture
- API Integration: Automate workflows and exports
Pricing
- $0.24 per vCPU/hour - Simple, transparent pricing
- 2 vCPU minimum, 8GB memory - Scales to 32+ vCPUs for large workloads
- ~$350/month starting cost - Database, storage, and networking included
- 30-day free trial available - Test with no commitment
- Standard support included - Professional and Enterprise support available as add-ons
Deployment Details
Setup Time
- 5-10 minutes automated CloudFormation deployment
- Pre-configured with all 20+ security tools
- Production-ready out of the box
Security & Compliance
- SOC 2 Type II compliant infrastructure
- Data encryption at rest and in transit
- Private VPC deployment
- Role-based access control
- Audit logging enabled
- GDPR/CCPA compliant
Why reNgine Cloud?
vs. Manual Reconnaissance
- 80% time savings - weeks to hours
- Consistent methodology - repeatable processes
- Centralized data - no more scattered CSV/JSON files
- Continuous monitoring - vs. point-in-time assessments
vs. Commercial ASM Platforms (Censys, Shodan, etc.)
- 50-70% cost savings - $350/mo vs. $20K-50K/year
- Complete data ownership - all data in your AWS account
- Full customization - modify scans, add custom tools
- No vendor lock-in - portable container architecture
vs. Self-Hosted reNgine
- Managed infrastructure - no server administration
- Pre-configured tools - all 20+ tools integrated
- Automatic updates - security patches and new features
- Professional support - expert reconnaissance guidance
- High availability - production-grade reliability
Use Cases
Security Consultancies
- Manage multiple client reconnaissance projects
- Deliver automated continuous monitoring services
- Generate professional reports with AI assistance
- Scale team without proportional tool costs
Corporate Security Teams
- Monitor external attack surface continuously
- Track shadow IT and forgotten assets
- Integrate with existing security stack (SIEM, SOAR)
- Meet compliance requirements (PCI-DSS, ISO 27001)
Getting Started
- Subscribe on AWS Marketplace (uses your AWS committed spend)
- Deploy using our CloudFormation template (5-10 minutes)
- Configure your first reconnaissance project
- Launch automated scans and review AI-powered insights
Highlights
- 20+ integrated security tools with automated workflows
- AI-powered vulnerability analysis with GPT-4 and Ollama
- Continuous monitoring with real-time change detection
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
t3.xlarge Recommended | $0.96 |
c5a.12xlarge | $11.52 |
c5a.8xlarge | $7.68 |
t3.large | $0.48 |
t3.2xlarge | $1.92 |
c5a.16xlarge | $15.36 |
c5.4xlarge | $3.84 |
Vendor refund policy
HailBytes Refund Policy: Full refunds available within 24 hours of deployment for unresolved technical issues only.
To request a refund: Stop all instances Email support@hailbytes.com with Instance ID and issue details
Refunds not available for: Usage beyond 24 hours Non-technical reasons Multiple deployment attempts Changed requirements
Contact our Discord community for immediate technical support. Enterprise customers refer to contract terms.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
HailBytes ASM 1.4695, first release under the HailBytes ASM Platform brand (formerly reNgine Cloud).
What's new in the rebrand:
- HailBytes ASM is the productized, multi-tenant evolution of reNgine Cloud, with a focus on continuous attack surface management rather than one-off recon runs. All previous reNgine Cloud capabilities are preserved.
- Versioning has moved to a 1.<commit_count> scheme tied directly to the upstream HailBytes ASM repository, replacing the legacy reNgine 2.x line. This release supersedes the reNgine 2.2.5 AMI.
Highlights since the last marketplace release:
- Redesigned dashboard overview with denser KPI strip, severity chips, and live-updating scan progress and timeline on the scan detail page.
- New per-scan live status JSON endpoint with backoff and visibility-pause polling for lighter browser load.
- Findings status subtabs now show real counts; triage banner and target risk-score cards migrated to the redesign token system.
- Compliance report template hygiene fixes (no more leaked comments in rendered PDFs) and consolidated severity badge rendering.
- Performance: batched dashboard KPI count queries and new tenant composite indexes; enterprise-scale example seed data for realistic local testing.
- UAT pipeline: django-silk profiling wired into CI with captured artifacts; fix for the body.loading white-screen race on slow first paint.
- Hotfixes carried forward from reNgine 2.2.5 for nuclei core workflow breakage and subscan handling.
Upgrade notes:
- Existing reNgine Cloud AMI buyers can launch this AMI as a drop-in replacement; data and engine YAML configurations remain compatible.
- Default OS is now Ubuntu 24.04.1 LTS.
Additional details
Usage instructions
Initial Setup
- Launch the HailBytes ASM instance from AWS Marketplace.
- Recommended instance type: t3.large (minimum: 2 vCPU, 8 GB RAM, 40 GB disk).
- Default OS user: ubuntu (SSH key-based auth on port 22).
- Configure network security:
- Inbound TCP/443 (HTTPS) from your admin CIDR for the HailBytes ASM web UI.
- Inbound TCP/22 (SSH) from your admin CIDR for instance management.
- Outbound 443 to the public internet so scan tools (nuclei, subfinder, amass, etc.) can reach target assets and update their data feeds.
- First boot (5 to 10 minutes):
- The instance bootstraps PostgreSQL, Redis, the Django web app, Celery workers, and the bundled recon toolchain (30+ tools) automatically.
- Wait until cloud-init completes before browsing to the UI.
- Access the web console:
- Navigate to https://<EC2-public-DNS>/ in your browser.
- You will see a self-signed TLS warning on first launch; accept it or install your own certificate (see "TLS and Custom domain" below).
- Create the first admin account:
- SSH to the instance: ssh ubuntu@<EC2-public-DNS>
- Run: sudo docker compose exec web python manage.py createsuperuser
- Log in to the web UI with the credentials you just created.
Configuration
- API keys for AI analysis (OpenAI, OpenRouter, Ollama), notification webhooks (Slack, Discord, Telegram), and SIEM integrations (Splunk HEC, Microsoft Sentinel, generic Syslog or Webhook) are all configured from Settings inside the web UI. No file edits required.
- Scan engines can be customized through the in-app Engine Wizard (Goal, Depth, Notifications) without writing YAML.
- Scheduled and continuous scans are managed under Targets, Schedule.
TLS and Custom domain
- Replace /etc/nginx/certs/{cert.pem,key.pem} with your own certificate.
- Restart the proxy: sudo docker compose restart proxy
Upgrades
- Pull the latest images and restart: sudo docker compose pull && sudo docker compose up -d
- Database migrations run automatically on container start.
Support and Documentation
- Product docs: https://hailbytes.com/asm
- Support: support@hailbytes.com
- Issues and feature requests: https://github.com/HailBytes/hailbytes-asm/issues
Resources
Vendor resources
Support
Vendor support
Support Resources
- Email: security-support@hailbytes.com
- Documentation: https://hailbytes.com/pages/documentation/
- Product Page: https://hailbytes.com/pages/rengine/
- Support Plans: https://hailbytes.com/pages/support-pricing/
Questions? Visit https://hailbytes.com or email sales@hailbytes.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.