AI-Powered Security Monitoring & Threat Detection Platform
What's included in v1.0.0
Core Features
- Real-time log ingestion via FastAPI backend
- Unsupervised anomaly detection using Isolation Forest (scikit-learn)
- Interactive Next.js dashboard with Recharts visualizations
- 3D Threat Globe and Network Topology Graph (React Three Fiber / Three.js)
- Threat classification: Normal / Suspicious / Critical
- REST API with Swagger docs at
/docs - SQLite database with SQLAlchemy ORM (PostgreSQL-ready)
Infrastructure
- Docker & Docker Compose support for containerized deployment
- GitHub Actions CI/CD pipeline with automated tests
- Comprehensive unit tests for
/logs/API endpoints
Documentation
- Full setup guide (SETUP_GUIDE.md)
- Architecture diagram in README
- CONTRIBUTING.md and SECURITY.md
- Advanced Features Implementation Guide in
/docs
Tech Stack
- Backend: Python 3.10+, FastAPI, scikit-learn, SQLAlchemy, SQLite
- Frontend: Next.js 15, TailwindCSS, Recharts, Three.js, React Three Fiber
- DevOps: Docker, GitHub Actions
Getting Started
See the README and SETUP_GUIDE.md for full installation instructions.