Critical-risk tools in 100Hires - AI ATS & Recruitment Software
19 of the 136 tools in 100Hires - AI ATS & Recruitment Software are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
hires_batch_remove_from_boardsDestructiveDeactivate publication of several jobs on the given boards.
-
hires_batch_remove_tagsDestructiveRemove tags from up to 100 candidates; returns per-item results.
-
hires_cancel_all_notification_messagesDestructiveCancel all scheduled notification emails of a candidate; sent ones are unaffected.
-
hires_delete_applicationDestructivePermanently delete an application.
-
hires_delete_candidateDestructivePermanently delete a candidate.
-
hires_delete_companyDestructiveSoft-delete a company; its public career site goes offline.
-
hires_delete_email_templateDestructiveSoft-delete an email template; automations that used it cannot pick it for new actions.
-
hires_delete_formDestructiveDelete an application form.
-
hires_delete_jobDestructiveDelete a job.
-
hires_delete_job_webhookDestructiveDelete a job webhook.
-
hires_delete_messageDestructiveCancel a scheduled message before it is sent.
-
hires_delete_noteDestructiveDelete a note.
-
hires_delete_notification_messageDestructiveCancel a scheduled notification email; sent messages cannot be canceled.
-
hires_delete_nurture_campaignDestructiveSoft-delete a nurture campaign; running executions stop.
-
hires_delete_questionDestructiveDelete a reusable question from the catalog.
-
hires_delete_webhookDestructiveDelete a company-scoped webhook.
-
hires_remove_candidate_tagDestructiveRemove one tag from a candidate.
-
hires_remove_from_job_boardDestructiveDeactivate the job's publication on the given boards.
-
hires_transfer_applicationFinancialTransfer an application to another job by creating a new application there, optionally at a given stage.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.