CyberSurhub Enterprise is a modern, modular cybersecurity operations platform designed to automate and orchestrate Red, Blue, and Purple team exercises. The system leverages an enterprise-grade technology stack to ensure high performance, security, and scalability.
-
FastAPI Backend (
/src/api)- High-performance, asynchronous REST API framework.
- Handles JWT-based authentication, user sessions, and endpoint routing.
- Provides a Swagger UI (
/docs) for API discovery and testing.
-
Operations Suites (
/src/services)- Red Team Suite: Automates reconnaissance, vulnerability scanning, and exploitation using industry-standard tools (e.g., Nmap, Netcat).
- Blue Team Suite: Focuses on log analysis, monitoring, threat intelligence ingestion, and incident response.
- Purple Team Suite: Facilitates collaboration between Red and Blue teams, offering real-world scenario testing and unified reporting.
-
Core Engine (
/src/core)- Centralized database configuration (PostgreSQL/SQLite).
- Core utility functions and base modules shared across all operation suites.
-
Web Dashboard (
/frontend)- A modern React-based frontend styled with Tailwind CSS.
- Communicates securely with the FastAPI backend using JWTs.
- Deployed via an Nginx container for optimal static file serving.
-
Integrations (
/src/integrations)- Handles external APIs, tools, and services (e.g., GitHub, Ollama) required for threat intelligence and vulnerability checks.
The entire application is containerized using Docker and orchestrated via Docker Compose.
cybersurhub-engine: The backend API container running on port11443.cybersurhub-frontend: The React frontend container running on port80.
- Clone the repository.
- Run the automated startup script:
./start.sh
- Access the Dashboard at
http://localhost. - Access the API documentation at
http://localhost:11443/docs.
This software is licensed under the Proprietary License of CyberSurhub. See the LICENSE file for details.