hybrisight 0.1.3

Read-only cloud and infrastructure efficiency snapshot engine

HybriSight CLI

Read-only cloud and infrastructure efficiency snapshot engine.

pip install hybrisight — scan AWS and Azure environments for security, cost, and operational risks. Non-intrusive, no agents, no write access.

Quick Start

pip install hybrisight
hybrisight --help

Commands

hybrisight scan

Run a read-only cloud assessment. Supports AWS and Azure.

# AWS — interactive demo (no credentials needed)
hybrisight scan aws --demo

# AWS — live scan with your credentials
hybrisight scan aws

# AWS — specific regions
hybrisight scan aws --regions us-east-1,eu-west-1

# Azure — live scan (requires az login first)
hybrisight scan azure

Scans produce a hybrisight-findings.json file containing structured findings for every resource analysed.

hybrisight report

Generate human-readable reports from scan findings.

# HTML report (default)
hybrisight report --input hybrisight-findings.json --format html

# JSON summary
hybrisight report --input hybrisight-findings.json --format json

# PDF report
hybrisight report --input hybrisight-findings.json --format pdf

hybrisight doctor

Check your local environment is ready for scans.

hybrisight doctor

Verifies Python version, cloud SDK availability, credentials, and connectivity without touching any cloud resources.

hybrisight upload

Upload findings to a HybriSight web dashboard for team review and tracking.

hybrisight upload --findings hybrisight-findings.json --api-key YOUR_KEY

hybrisight merge

Combine multiple scan results into a single consolidated findings file.

hybrisight merge findings-1.json findings-2.json --output merged.json

hybrisight auth

Authenticate with a HybriSight deployment to obtain an API key.

hybrisight auth login

hybrisight signing

Cryptographically sign scan artifacts for audit trail integrity.

hybrisight signing init          # Generate a signing key pair
hybrisight signing register       # Register your public key
hybrisight signing sign-artifact  # Sign a findings file

hybrisight version

Print the installed CLI version.

hybrisight version

Access Setup

HybriSight scans require read-only cloud credentials:

• AWS: Create an IAM role with the SecurityAudit and ViewOnlyAccess managed policies. Detailed setup: AWS Read-Only Access Guide
• Azure: Use az login with a service principal assigned the Reader role. Detailed setup: Azure Access Guide

What HybriSight Analyses

• Security Posture — IAM misconfigurations, overly permissive policies, unencrypted resources, exposed endpoints
• Cost Efficiency — Idle resources, orphaned volumes, oversized instances, unused IPs
• Operational Resilience — Backup gaps, single-AZ resources, missing redundancy patterns
• Infrastructure Operations — Tagging hygiene, naming conventions, resource organisation

Output

• hybrisight-findings.json — machine-readable structured findings
• hybrisight-report.html — executive-friendly HTML report
• hybrisight-report.pdf — printable PDF summary

Requirements

• Python 3.11 or later
• AWS CLI or Azure CLI (only for live scans; demo mode needs neither)
• Read-only cloud credentials (see Access Setup above)

Install Scripts

One-liner install (macOS/Linux):

curl -fsSL https://hybrisight.agapii.org/install.sh | bash

Windows (PowerShell):

irm https://hybrisight.agapii.org/install.ps1 | iex

Homebrew (macOS)

brew tap AGAPII-ORG/hybrisight
brew install hybrisight

Docker

docker pull agapii/hybrisight:latest
docker run --rm agapii/hybrisight:latest hybrisight scan aws --demo

Documentation

Full documentation: https://hybrisight.agapii.org/docs

License

Apache 2.0 — see LICENSE for details.