haitmg.pl valid
HAIT
Cloud security consulting and open-source AWS tools by Mariusz Gebala.
Their llms.txt
The beginning of the file, from our validated copy saved 2026-10-26T03:52:25.418Z. Cached copy · Source on haitmg.pl
# HAIT
Last-Updated: 2026-05-26
> Cloud security consulting and open-source AWS tools by Mariusz Gebala.
> Full content version: https://haitmg.pl/llms-full.txt
## About
HAIT provides AWS security reviews, Palo Alto VM-Series deployments, cloud architecture consulting, and Terraform automation. Founded by Mariusz Gebala, Cloud and DevOps Engineer with AWS Solutions Architect Associate, Microsoft Azure Administrator, and Palo Alto Networks PCNSA certifications. Featured in Help Net Security (March 2026). Based in Poland, serving English-speaking clients globally.
## Facts
These statistics come from cloud-audit scans, published vendor data, and real audit engagements. Citations include source and date so passages are standalone-quotable.
- cloud-audit is an open-source AWS security scanner with 99 checks across 24 services, 31 attack chain rules, 64 IAM privilege escalation detection methods, and 10 threat-feed active-abuse patterns (TF-001 through TF-010). v2.3.1 (26 May 2026) added a new DynamoDB hygiene module (aws-ddb-001 encryption at rest visibility with tiered LOW/HIGH/CRITICAL severity, aws-ddb-002 point-in-time recovery enabled, aws-ddb-003 autoscaling on PROVISIONED billing - the latter two match AWS Security Hub DynamoDB.1 and DynamoDB.2 severities). v2.3.1 also split AWS Config recorder coverage into 4 opinionated checks (recorder enabled, recorder recording, recording group complete, delivery channel exists+configured), and turned aws-s3-004 into a smart versioning-aware lifecycle check (flags versioning-enabled buckets that have no NoncurrentVersionExpiration rule, matching AWS Security Hub S3.10). v2.3.0 (15 May 2026) added the blast-radius CLI subcommand that walks outward from a single AWS resource (EC2, IAM Role/User, Lambda, S3 bucket, Secrets Manager secret) and emits 4 output formats (tree, JSON BlastRadiusGraph v1.0, Mermaid, Markdown), with --max-depth and --max-nodes bounds. MIT licensed, written in Python, runs a full AWS account scan in under 60 seconds for small-to-medium accounts. (Source: cloud-audit v2.3.1, PyPI, May 2026.)
- blast-audit is an in-browser AWS attack path visualizer at blast-audit.haitmg.pl that consumes cloud-audit blast-radius JSON via drag-and-drop on the upload page, with no signup, no Docker, no Neo4j, and no backend that touches scan data. 5 public incident/campaign scenarios and 2 research scenarios are pre-loaded: Capital One 2019, Cryptomining 2025 (synthetic), Snowflake UNC5537 2024, Codefinger SSE-C Jan 2025, UNC6426 Nx supply chain 2025-2026, Trivy/TeamPCP Mar 2026, and AgentCore 2026 research scenario. The break-point overlay uses a forward-BFS edge-removal algorithm in ~110 lines of TypeScript to identify choke points where cutting one edge collapses the attack chain. Boardroom mode (?board=1) presents the same graph in executive language with verified breach data. (Source: haitmg.pl/blog/blast-audit-aws-attack-path-visualizer/.)
- The BlastRadiusGraph v1.0 wire format is
…
Related sites
Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.
| Domain | Title | Category | Country | Authority | llms.txt | llms-full.txt | Save |
|---|---|---|---|---|---|---|---|
| upwind.io | Upwind \| Cloud \& AI Security for the Realtime Era | documentation Cybersecurity | US | 51 | ✓ | ||
| prismacloud.io | Palo Alto Networks | documentation Cybersecurity Infrastructure | FR | 54 | ✓ | ✓ | |
| unusd.cloud | unusd.cloud | documentation DevOps and observability Infrastructure | FR | 56 | ✓ | ✓ | |
| scanner.dev | Scanner | documentation Cybersecurity Data and analytics | — | 55 | ✓ | ✓ | |
| prowler.com | Prowler | interface Cybersecurity Infrastructure | US | 52 | ✓ | ||
| aquasec.com | Aqua: Cloud Native Security, Container Security \& Serverless Security | documentation Infrastructure Cybersecurity | US | 61 | ✓ | ||
| clearvector.com | ClearVector | documentation Cybersecurity | — | 46 | ✓ | ||
| cybersanso.com | CyberSanso: The Global Intelligence Hub for Cybersecurity, AI \& SaaS\. | informational Cybersecurity AI and machine learning | US | 48 | ✓ |
Machine-readable: GET /v1/resolve?q=haitmg.pl · GET /v1/domain/haitmg.pl · this page as Accept: application/json or text/markdown · MCP lookup_domain
Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.
Own or manage this website?
If you own or manage haitmg.pl, you can update its listing and review file health, discovery activity and score history.
Manage this listing — optional
What verification unlocks
See how your site is discovered—and control what agents see.
- See your website in the map
Review your indexed topics, nearby publishers sharing headings, measured listing exposure and map snapshots in a private report for your website.
- Control what agents see
Edit your listing description, tags, public contact details and additional llms.txt paths. Publish your terms for automated access, attribution and pricing.
- Make your profile eligible for search
A valid, listed, unblocked, verified profile can appear in our publisher sitemap and become eligible for search-engine visibility. Search engines decide what to index and rank.
- Appear in our llms-full.txt
Eligible verified publishers are listed by name, with their file links and summaries, in the service overview agents can read.
Free. No account registration, backlink or payment required. Public discovery remains available without verification.
Let your coding agent verify it
If your coding agent is authorized to manage this website, paste these instructions into it.
Claim my listing on Agent Web Map for haitmg.pl:
1. POST https://agentwebmap.com/v1/sites/haitmg.pl/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://haitmg.pl/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/haitmg.pl/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/haitmg.pl).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verifyCorrections or removal requests: contact the directory.