Licenses

Hayabusa and its detection rules are released under two different licenses.

Hayabusa (the tool)

Hayabusa is released under the GNU Affero General Public License v3.0 (AGPLv3). The full legal text is in the LICENSE.txt file of the repository.

Detection rules

The Sigma rules and the Hayabusa detection rules (hosted in the hayabusa-rules repository) are released under the Detection Rule License (DRL) 1.1.

What the AGPL means for you

In short, you are free to use Hayabusa however you like — including for commercial purposes: internally within your organization, in SaaS solutions, for consulting work, incident response engagements, and so on.

The AGPL adds one important condition: if you modify or improve Hayabusa's code and provide it to others as a service (for example, as part of a SaaS offering), we ask you to open-source those improvements and make them available under the same license.

When you do make improvements, we'd greatly appreciate it if you would give back to the project by submitting a pull request to the upstream repository — that way the whole community benefits from your work.

Other data

Hayabusa also uses GeoLite2 data created by MaxMind.