Crossfyre vs reNgine (HailBytes ASM)
Self-hosted ASM priced per compute hour vs hosted recon priced per seat.
reNgine is a popular open-source recon framework; its commercial form, HailBytes ASM, is sold as self-hosted attack surface management at roughly $0.24/vCPU/hour, about $4,200/year for the recommended instance. You run and pay for the compute. Crossfyre runs the control plane for you and lets you bring your own scan nodes, so you are not paying a vendor for vCPU-hours.
reNgine / HailBytes ASM
- Self-hosted ASM built on the open-source reNgine framework
- Priced per compute: ~$0.24/vCPU/hour (~$4,200/yr recommended)
- You provision, run, and pay for the underlying infrastructure
- Targeted at MSSPs and pentest firms
- Open-source core competes with the paid product
Crossfyre
- Hosted control plane, nothing to stand up or maintain
- Flat $29 to $129/mo, not metered vCPU-hours
- Bring your own scan nodes (your compute, your egress)
- Crash-safe distributed scans and a live shared dashboard
The honest take
Choose HailBytes ASM if you want to self-host and are comfortable paying per vCPU-hour. Choose Crossfyre if you want predictable flat pricing and a managed control plane without giving up control of your scan nodes.
Frequently asked
Is reNgine free?
reNgine is free and open source (you self-host it). HailBytes packages a managed ASM offering around it that is billed per compute hour. Crossfyre is a hosted control plane with flat plans (Free, Pro, Reaper) where scanning is unlimited within your plan.
Can I keep my scan traffic on my own infrastructure?
Yes. With Crossfyre your nodes run on boxes you control, so scan traffic originates from your chosen egress. The control plane orchestrates them, it does not proxy your scans.