From Agent Install to First Threat Detection in Under an Hour
No traffic proxying. No DNS changes. No firewall rules to modify. A sidecar agent that attaches to your API service, learns its normal behavioral profile in real traffic, and starts surfacing anomalies — credential stuffing campaigns, BOLA patterns, sequence deviations — before you've finished your first coffee.
Instrument — Deploy the Lightweight Agent
Install the Hirefathom sidecar agent alongside your API service. It runs in your infrastructure, never touches external networks for request data. A single curl command or Kubernetes manifest is all it takes. Configure three environment variables and you're running.
Observe — Baseline Builds Automatically
In Observe mode, Hirefathom silently watches every API call without blocking anything. Within minutes, the behavioral graph starts building per-endpoint traffic profiles: method distributions, parameter value ranges, call sequence patterns, and request timing. No configuration required — the baseline is fully automatic.
Detect — Behavioral Anomalies Surfaced
Once the baseline is established, the engine flags deviations: credential stuffing velocity spikes, BOLA-style object enumeration, price manipulation sequences, path harvesting attempts. Every alert includes the full request context, the expected baseline, and a confidence score. No signature files to update.
Respond — Block, Alert, or Investigate
Set the response mode per endpoint. Block high-confidence threats inline before they reach your service. Alert on suspicious patterns for human review. Integrate alerts into Slack, PagerDuty, or your SIEM. All decisions are logged with full audit trails. Start in Observe mode, graduate to block when you're confident.
Install in Under 5 Minutes
Single-command agent deployment. Configure three environment variables and start detecting threats.
# Install the Hirefathom agent
$ curl -sSL https://install.hirefathom.com/agent | bash
✓ Hirefathom agent v0.9.4 installed
✓ Sidecar process registered
# Configure your API key and target
$ export HFM_API_KEY=hfm_sk_e8f3a2b1c94d71...
$ export HFM_TARGET=localhost:8080
$ export HFM_MODE=observe
# Start the agent
$ hfm start
✓ Agent started — observing API traffic
✓ Behavioral baseline: building (0 / ~500 requests)