Skip to content

Helix Fusion / Early access

Full dynamic analysis, live inside Helix.

Fusion connects to a running Helix session and takes the project live. Recon, a live browser, and terminal sessions run against the same target you are reversing. Coming soon to Helix.

See what is coming
api.example.com
Full Suite
Intensity
Light
Standard
Aggressive
Full dynamic sweep: recon, live browser, packet capture, and hardware probes.
Standard sweep, all families
Run Full Suite
Available
Packet Capture
Live pcap sniff and dissect
Interface
en0
lo0
all
Dissect TCP streams
Run
Advanced
e.g. tcp port 443 or host {target}
Port Scan
Open ports and service banners
HTTP Probe
HEAD/GET with redirect tracing
Live Browser
MCP navigate, screenshot, DOM
BLE Scan
Discover peripherals and GATT
NFC Read
Dump tags and decode structure
Sub-GHz Capture
Record and replay signals
Terminal
Attached PTY session
Dynamic Analysisapi.example.com
1/1 stages
completed
09:14:02.001[stderr]Connected to Helix session (pid 4821)
09:14:02.003[stderr]Project inherited: target api.example.com
09:14:02.145[stdout]Recon: TLS and HTTP surface mapped
09:14:03.322[stdout]Browser: navigate https://api.example.com (MCP)
09:14:03.610[stdout]Browser: DOM snapshot and screenshot saved
09:14:03.901[stderr]Capture: sniffing en0
09:14:04.324[stdout]Capture: 214 packets across 12 hosts
09:14:04.512[stdout]Capture: TLS ClientHello -> api.example.com
09:14:04.780[stdout]BLE: 3 peripherals in range
09:14:05.101[stdout]BLE: GATT services enumerated on 0x1a2b
09:14:05.402[stdout]Terminal: pty session attached
09:14:05.700[stdout]Findings synced back into Helix
09:14:05.902[stdout]Run complete: 5 families in 3.74s
09:14:05.948[stderr]Structured: 214 packets, 3 devices saved
09:14:05.950[stderr]Stage completed: exit code 0
09:14:05.952[stderr]Run completed
16 lines214 packets
exit 0

/ 01

Connects to Helix.
Takes it live.

Fusion boots without a project. It picks up the one you already have open in Helix, so the binary you are reversing and the live analysis you run stay in a single project.

Early access. Coming soon.

Targets
api.example.com
Main API
domain
admin.example.com
domain
staging.example.com
Staging
domain
93.184.216.34
Edge server
ipv4
10.0.0.1
ipv4
5 targets

/ 02 - Custom by design

Not three presets.
A full custom workbench.

Fusion is not a fixed pipeline. Pick individual actions, build your own suite, pass raw flags, or drop into a terminal and drive the target by hand. Automate what you want, do the rest yourself.

01Any single action

Run one action at a time with full control over its options, from a live packet capture to a BLE probe.

02Compose your own suite

Chain exactly the actions you want, at the depth you want. Save it and re-run it against any target.

03Go fully manual

Attach a PTY terminal and drive the live target yourself. Nothing is locked behind automation.

04Presets when you want them

Prefer a one-click sweep? Light, Standard, and Aggressive presets are there as a shortcut, never a cage.

Helix Fusion

Full dynamic analysis, coming soon.

Fusion connects to your Helix session and takes the project live - recon, a live browser, packet capture, and hardware, all against the same target. Get on the early access list.

See Helix