// services
What HackEx does_
One workspace covering the jobs a security team would do: watch, detect, explain, contain and fix. Continuous, not once a quarter.
// continuous_scanning
CONTINUOUS SCANNING
Websites, APIs, uploaded code and connected repositories, probed on a schedule you choose, plus safe attack-surface checks on verified domains.
sites · APIs · zips · repos// live_monitoring
LIVE MONITORING
Live Watch heartbeats your site every 60 seconds and the on-server agent reads its own logs for break-in attempts, tampering and drift.
uptime · auth.log · drift// threat_detection
THREAT DETECTION
Signals become incidents with severity, history and evidence, deduplicated so floods become one alert, not fifty.
dedup · severity · evidence// threat_stop
THREAT STOP
Whitelisted containment on your own infrastructure: block IPs, isolate a host, lock an account, ship a fix. Every action reversible and audited.
contain · reversible · audited// ai_explanations
AI EXPLANATIONS
Every finding gets a plain-English write-up: what it means, the attack scenario, what it costs your business, and the fix. HEX answers follow-up questions by text or voice.
plain English · scenarios · voice// auto-fix_prs
AUTO-FIX PRs
Verified patches opened as pull requests on your repo. Merge when ready, or grant deploy permission and HackEx ships and rolls back if health fails.
verified diffs · PRs · rollback// compliance_mapping
COMPLIANCE MAPPING
Findings map to SOC 2, PCI DSS and ISO 27001 controls with a readiness score, gap list and SLA clocks. The paperwork layer, handled.
soc2 · pci · iso27001// drills__live_fire
DRILLS & LIVE FIRE
Test the detection pipeline with fake signals, or run real harmless attack probes against your own infrastructure to prove the loop end to end.
signal drill · live fire// deep_code_analysis
DEEP CODE ANALYSIS
AST-level scanning across every major language · PHP, Python, JavaScript, TypeScript, Go, Java, Ruby, C#, Rust and more · over two thousand rules, cross-file taint tracking that follows input through your functions, verified secrets, and dependency CVEs with reachability across nine ecosystems.
sast · taint · sca · secrets// iac__ci/cd
IAC & CI/CD
Terraform, Kubernetes, Dockerfiles, docker-compose and pipeline configs (GitHub Actions, GitLab CI, Jenkins, CircleCI) scanned for the same classes attackers hunt: open security groups, privileged containers, baked secrets.
terraform · k8s · pipelines// git_providers
GIT PROVIDERS
GitHub and GitLab · connect a repo and every push and merge/pull request gets scanned. Blocking findings comment right on the PR; auto-fixes arrive as mergeable pull or merge requests.
github · gitlab · mr scans// enterprise_controls
ENTERPRISE CONTROLS
SAML SSO through Okta or Entra, per-project access scoping, a CI gate that fails builds on blocking findings, ticketing webhooks, CycloneDX SBOM exports, and a hash-chained audit trail auditors can verify.
sso · rbac · ci gate · sbom