Do we have to replace our existing scanners or EDR?
No. h00dies connects to the security stack you already run and uses your existing tools as discovery sources through connectors. We add an attacker's-perspective decision layer on top — we do not replace what works.
Can scanning affect our production services?
Scans follow non-destructive, safe-execution principles. Sensitive assets are covered by non-intrusive external validation instead of active probing, and scan modes, schedules, and exclusion lists are agreed with you before anything runs.
Can you operate in segmented or air-gapped environments?
Yes. We support on-premises and air-gapped deployment with in-house AI integration, so nothing has to leave your boundary. This is a supported configuration, not a special request.
What happens to our data when the contract ends?
We provide a standard data-export procedure. You leave with your data in usable form — findings, evidence, and history included.
How is our data protected on the platform?
Data is encrypted with AES-256-GCM, access is authenticated with JWT and OTP, tenants are isolated by design, and actions are audit-logged. A security company should be able to answer this question precisely — that is the answer.
Is our data used to train external AI models?
No. Core verdicts are made by deterministic logic, not by a model, and the AI components can be configured as offline or self-hosted models. Your data is used to run and report your assessment — never for training.
Can the AI invent a threat — or miss one?
AI verifies and explains; deterministic rules make the call. A hallucination cannot create a finding or suppress one, and validated findings carry PoC evidence you can inspect yourself.
How many people do we need to run this?
The platform is designed so that, once established, one or two dedicated people can run it. Dual-AI validation removes the false-positive triage that usually consumes a team's time.
How is pricing structured?
EASM and CTEM are annual subscriptions priced by managed asset count; ICES is priced by user count. We calculate ROI together with your PoC results, so the number arrives with its justification.
Can we stop partway through a PoC or rollout?
Yes, at any stage. The PoC is free, read-only, and non-destructive, and the findings are yours to keep whether or not you continue.