RuleHawk 0.1.1

Verify a download:

sha256sum -c SHA256SUMS --ignore-missing

Docker: docker pull hexward/rulehawk:0.1.1

v0.1.0

RuleHawk v0.1.0

Self-hosted firewall config auditor for iptables/nftables, Cisco ASA, pfSense/OPNsense and FortiGate: shadowed & duplicate rules, over-permissive rules, hygiene checks, drift vs baseline. Fully offline.

This is the free edition, built from this repository with an empty license issuer key — it has no license activation. Free-tier limits: 1 config. Pro and Team tiers (higher limits, delivered binaries) are available at whop.com/nizar-tuanku/rulehawk?utm_source=github.

Install

tar -xzf rulehawk-free-0.1.0-linux-amd64.tar.gz
./rulehawk

Dashboard: http://127.0.0.1:8426 — single binary, SQLite storage in the working directory, no telemetry, nothing leaves your network.

Or build from source (Go 1.24+, CGO required for the SQLite driver):

go build ./cmd/rulehawk

Integrity

Verify the download:

sha256sum -c SHA256SUMS

SHA-256: 7c59fc11485f7625b498664e9529d32daaeb7cfff3317e08287953fd33474a1a

Feedback

Run it in a lab first. Bug reports and lab feedback via GitHub Issues are very welcome.