Randomized trial demonstrates Hayula's effectiveness in identifying security vulnerabilities, suggesting accessible AI for cybersecurity.
We present Hayula, an integrated ecosystem for cybersecurity AI, multi-agent orchestration, and autonomous bug bounty operations—built entirely on a single Apple Mac Studio M2 Ultra workstation (192GB unified memory, $6,000 retail). The ecosystem comprises nine specialized 7B language models for security analysis, a hierarchical multi-agent framework with 21 agents across four functional divisions, an automated reconnaissance-to-submission pipeline targeting 23 HackerOne programs, and supporting infrastructure spanning bilingual Arabic-English AI, terminal tooling, and a custom Linux distribution. Over a two-week deployment, Hayula identified server-side request forgery vulnerabilities across five major technology companies (Amazon, Meta, Apple, MongoDB, Shopify), discovered exposed GraphQL endpoints, and produced verified HackerOne submissions with an estimated bounty value of $53,500–$198,000—all at $0 cloud compute cost. This work demonstrates that specialized cybersecurity AI, previously accessible only through enterprise licenses costing $100,000+/year, can be built, trained, and operated on consumer hardware by a single researcher. We release all components under open source licenses (Apache 2.0, CC0, MIT) as the Hayula ecosystem at https://huggingface.co/BinSaqban and https://github.com/HayulaLab.
No takes yet. Share an insight, caveat, or question.
Yahya Saqban (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: