Getting Started with Hawkra
Hawkra is a vulnerability management and penetration testing platform built for security professionals and teams. It brings vulnerability scanning, asset management, and team collaboration into a single platform.
Deployment Options
Hawkra is available in two deployment modes:
- SaaS (Cloud-Hosted) — Sign up at hawkra.io and start immediately. Choose between a Free tier for individual use or Premium for teams and advanced features.
- Self-Hosted — Deploy on your own infrastructure using Docker. All data stays on your servers. See the Self-Hosted documentation for deployment instructions.
Creating Your Account
Head to hawkra.io and register with a display name, email, and password. After verifying your email, you are logged in and ready to create your first workspace.
For self-hosted instances, your administrator controls whether registration is available.
Securing Your Account
Hawkra supports multi-factor authentication via TOTP authenticator apps (Google Authenticator, Authy, 1Password, etc.) and email-based MFA. TOTP and email MFA are available in both editions, and administrators can require MFA for all accounts. Enable MFA from Account Settings > Security.
When you sign in, a mistyped code can be corrected; after several wrong codes you sign in with your password again. Asking for a code again (at sign-in, when resetting your password, or when changing account details) sends the same code, so the code in any of those emails works. If a code step shows Too many requests, go back to the login page and try again later. Recovery codes can be typed in upper or lower case.
Subscription Tiers
| Feature | Free | Premium | Self-Hosted |
|---|---|---|---|
| Workspaces | 2 | Unlimited | Unlimited |
| Assets per workspace | 15 | 5,000 | Unlimited |
| Storage | 25 MB | 10 GB | Configurable |
| Max file size | 5 MB | 100 MB | Configurable |
| Reports per month | 3 | Unlimited | Unlimited |
| Import formats | Nmap | All (Nessus, OpenVAS, OWASP ZAP, BloodHound, WingSpan, Nuclei) | All |
| AI Assistant | Not available | 100 messages per month | Unlimited (your own provider or a local model) |
| TalonStrike | No | No | Yes |
| OSINT Tools | WHOIS, DNS only | All 5 tools, 500 calls per month | All 5 tools |
| Team Management | No | Yes | Yes |
| Remediation Tracking | No | Yes | Yes |
| Custom Report Logo | No | Yes | Yes |
Manage your subscription and billing from the Billing & Usage page, accessible via the user menu.
Platform Features
- Vulnerability Management — Import scan results from Nmap, Nessus, OpenVAS, OWASP ZAP, BloodHound, WingSpan, and Nuclei. Track findings and manage remediation workflows.
- Asset & Network Management — Organize hosts, devices, and network segments. Track open ports, operating systems, and services.
- AI-Powered Analysis — Analyze vulnerabilities, get remediation suggestions, and accelerate your workflow with the built-in AI assistant.
- TalonStrike — AI-driven automated penetration testing for self-hosted deployments.
- OSINT Toolkit — WHOIS lookups, DNS enumeration, and additional reconnaissance tools built into the platform.
- Compliance & Reporting — Assess against compliance frameworks and generate DOCX reports from your own template.
- Team Collaboration (Premium, for every collaborator) — Invite team members with role-based access control: Owner, Editor, Remediation Analyst, Viewer.
- Threat Intelligence Dashboard — Stay current with the latest vulnerabilities and threat intelligence feeds.
- Audit Logging — Every action within a workspace is logged with user, timestamp, and IP address.
If you are setting up a self-hosted instance, start with the Self-Hosted documentation first, then return here once your instance is running.