The extractor
A single static Rust binary that evaluates 368 hardening testcases on Linux and Windows, starts unprivileged, never touches the network by default, and writes exactly one file: a sealed .hbs report the issuing dashboard decrypts.
About
HBS Tool
HBS (Host Baseline Security) is an offline-first, strictly read-only configuration-security review platform for enterprise servers, built by PotenFYR Studios. It is built for four audiences: security leadership, system administrators, cyber analysts and upper management.
01
Two halves, deliberately separate
The dashboard
Bun + Hono + React. It issues one patched extractor per campaign and location, ingests sealed reports, routes hosts by machine-id, and serves consoles from executive one-pagers down to raw evidence pivots.
02
Open source, in an ecosystem
HBS is part of the PotenFYR Studios open-source ecosystem, alongside discord-botlists, statfyr and more at potenfyr.in. This documentation site is built from the repository's docs/ directory and deployed to GitHub Pages; the README mirrors the same content.