Command Reference

Complete reference of all available commands, organized by category.

Global

Command	Description
`hb --version`	Print CLI version
`hb --base-url URL`	Use custom API endpoint (on-prem installations)

Command	Description
`hb login`	Authenticate via OAuth browser flow
`hb logout`	Clear local credentials and optionally revoke session
`hb whoami`	Show current user, org, and project
`hb switch <org-id>`	Switch active organisation context
`hb orgs list`	List organisations you have access to
`hb orgs current`	Show the currently selected organisation
`hb orgs subscription`	Show subscription details (plan, quota, features)

Command	Description
`hb connect`	Connect your agent or scan a cloud platform
`hb projects list`	List all projects in current org
`hb projects use <id>`	Set active project for subsequent commands
`hb projects show [id]`	Show project details (current or specific)
`hb projects current`	Show active project information
`hb projects update`	Update project name or description
`hb projects delete <id>`	Delete project and all associated data

Command	Description
`hb test`	Create and run new security test experiment
`hb experiments list`	List all experiments for current project
`hb experiments show <id>`	Show detailed experiment information
`hb experiments status [id] [--all]`	Check experiment status (single, watch, or all-experiments dashboard)
`hb experiments wait <id>`	Block until experiment completes (CI/CD)
`hb experiments logs <id>`	View conversation logs and verdicts
`hb experiments terminate <id>`	Stop running experiment
`hb experiments delete <id>`	Delete experiment and logs
`hb status [--all]`	Check status of latest experiment or all experiments (alias)

Command	Description
`hb logs`	View logs from latest experiment or project-wide with scope flags (--last, --category, --days, --from, --until)
`hb posture`	View security posture score and grade
`hb posture --trends`	View historical posture timeline
`hb coverage`	View test coverage summary and gaps
`hb findings`	List persistent vulnerability findings
`hb findings update <id>`	Update finding status or severity
`hb findings assign <id>`	Assign finding to a team member
`hb report`	Generate HTML security report (project, org, or assessment)
`hb assessments`	List past security assessments
`hb assessments show <id>`	View assessment detail (posture before/after, drift, test count)

Command	Description
`hb guardrails`	Export learned security rules and patterns
`hb campaigns`	View current ASCAM campaign plan
`hb campaigns break`	Stop running campaign
`hb logs upload`	Upload production conversations for evaluation
`hb monitor`	Start, pause, or resume continuous monitoring

Command	Description
`hb connect --vendor <name>`	Scan cloud platform for shadow AI services
`hb connectors`	List registered cloud connectors
`hb connectors add`	Register new cloud connector with credentials
`hb connectors test <id>`	Test connector connectivity
`hb connectors update <id>`	Update connector name, credentials, or status
`hb connectors remove <id>`	Delete a connector
`hb inventory`	List discovered AI assets with filters
`hb inventory view <id>`	View detailed asset information
`hb inventory update <id>`	Update governance fields (owner, sanctioned, policy)
`hb inventory posture`	View shadow AI posture score
`hb inventory onboard <id>`	Create security testing project from asset
`hb inventory archive <id>`	Archive an inventory asset

Command	Description
`hb sentinel`	Show Sentinel setup instructions and available commands
`hb sentinel deploy --rg <name>`	Deploy infrastructure, create webhook, set signing secret, and verify -- fully end-to-end
`hb sentinel deploy --rg <name> --no-connect`	Deploy infrastructure only, skip webhook setup
`hb sentinel connect --url <url>`	Register webhook manually (only needed with --no-connect)
`hb sentinel test`	Send a test event to verify connectivity
`hb sentinel status`	Check connector health and recent deliveries
`hb sentinel sync`	Replay historical events to Sentinel for backfill
`hb sentinel disconnect`	Remove the Sentinel webhook and local configuration

Command	Description
`hb providers list`	List configured LLM providers
`hb providers add`	Add new LLM provider configuration
`hb providers update <id>`	Update provider credentials or settings
`hb providers remove <id>`	Remove provider configuration
`hb api-keys list`	List API keys for programmatic access
`hb api-keys create`	Create new API key (shown once)
`hb api-keys update <id>`	Update key name or activation status
`hb api-keys revoke <id>`	Revoke and delete API key
`hb members list`	List organisation members
`hb members invite`	Invite new member to organisation
`hb members remove <id>`	Remove member from organisation

Command	Description
`hb docs`	Open online documentation or specific topic
`hb completion [bash\\|zsh\\|fish]`	Generate shell tab-completion script
`hb --help`	Show CLI help and available commands
`hb <command> --help`	Show help for specific command