Six self-hosted security tools in one suite, ~40% off buying separately.

• CertLight — TLS expiry and weak-config monitoring
• Attack Surface Monitor — what you expose, diffed daily
• Decoy — canary tokens and honeypots, silent until touched
• Patchlight — CVE triage by real exploitation evidence
• RuleHawk — firewall audit: shadowed, permissive and drifting rules
• Loglight — SIEM-lite: detections correlated into incidents

They work as a system. Every tool sends findings to Loglight; a Decoy trip from an address Loglight saw scanning becomes one critical incident. Already run Wazuh or Splunk? Every tool exports there too (every tier), and Loglight reads Wazuh alerts back.

Server (all six on one host)

• Linux x86-64; six static binaries (~10 MB each) or Docker; SQLite files, no database server
• Measured idle: ~10 MB RAM per tool, ~60 MB for all six
• Minimum host: 2 vCPU, 2 GB RAM, 10 GB disk; only Loglight’s retention grows — 20+ GB at 10 sources
• Ports 8422-8427 (localhost by default) + Decoy honeypots and Loglight listeners

Suite Pro $99/mo (vs $164) — every tool at Pro. Suite Team $299/mo (vs $544) — every tool at Team. 14-day trial on both. Other Hexward tools are sold separately.

AI Assist (optional, offline): explains any finding on your hardware; the engine decides.

Delivery: keys by Whop DM; files in Downloads.

Whop sells paid licences only. Free editions: github.com/nizartuanku