Skip to content

Pmvita/SecureNet

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

90 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

🏒 SecureNet v2.2.0-enterprise

AI-Powered Network Defense. Enterprise-Grade Intelligence. Global-Scale Operations.

Enterprise Status SOC 2 Type II ISO 27001 CSE CIRA License

SecureNet is an AI-powered cybersecurity platform delivers autonomous threat detection, predictive risk assessment, and intelligent security operations management. It empowers organizations to efficiently manage network security, detect threats, and protect against cyber attacks, ensuring a secure and resilient network environment.


⭐ Quick Actions


πŸ“š Documentation Hub

πŸš€ Getting Started

🏒 Enterprise Features

πŸ›‘οΈ Security & Compliance

πŸ—οΈ Architecture & Development

πŸ“Š Operations & Monitoring

πŸ“‹ Project Management

🀝 Contributing & Support


πŸš€ Key Features

🧠 AI-Powered Threat Detection

  • Machine learning anomaly detection
  • Behavioral pattern recognition
  • Predictive risk assessment
  • Automated threat classification

πŸ” Live Network Discovery

  • Real-time device scanning (192.168.x.0/24)
  • Smart device classification (Router, IoT, Mobile)
  • Cross-platform support (macOS, Linux, Windows)
  • Network topology visualization

πŸ”” Real-Time Alert System

  • WebSocket-powered notifications
  • Smart categorization & priority filtering
  • Bulk operations & search functionality
  • Mobile-responsive notification center

πŸ” Enterprise Security & RBAC

  • 3-tier role-based access control
  • JWT + API key authentication
  • Session tracking & audit logging
  • Multi-tenant SaaS architecture

πŸ“Š CVE Intelligence Integration

  • NIST NVD API connectivity
  • Real-time vulnerability scoring (CVSS v3)
  • CISA KEV tracking
  • Vendor-specific analysis (Cisco, Fortinet, etc.)

πŸ“¦ SaaS Infrastructure

  • Stripe billing integration
  • Organization management
  • Usage analytics & metrics
  • Docker deployment ready

πŸ“Έ Platform Screenshots

Enterprise-Grade Security Operations Center Interface

Dashboard Overview Log Management Security Management
Dashboard Log Management Alerts
Network Monitoring Anomaly Detection System Configuration
Network Monitoring CVE System Configuration

Note: Screenshots demonstrate production-ready interface with enterprise security features. For complete visual documentation, see Screenshots Guide.


πŸ” Enterprise Role-Based Access Control (RBAC)

SecureNet Enterprise implements a robust 3-tier RBAC system with enterprise-grade user management:

Role Position Responsibilities Access Level
🏒 Platform Owner Chief Information Security Officer (CISO) Strategic oversight, compliance management, global tenant administration Full enterprise access, audit trails, financial reporting
πŸ›‘οΈ Security Admin Security Operations Manager SOC management, user provisioning, security policy enforcement Organization administration, user management, security controls
πŸ” SOC Analyst Tier 1/2/3 Security Analyst Threat monitoring, incident response, security event analysis Dashboard access, alert management, reporting tools

πŸ”’ Enterprise Security Features

  • Multi-Factor Authentication (MFA) - Required for all enterprise accounts
  • Role-Based Permissions - Granular access control with principle of least privilege
  • Session Management - Advanced session tracking and timeout controls
  • Audit Logging - Comprehensive audit trails for all user activities
  • Enterprise Email Integration - Corporate email domain validation
  • Password Policies - Enterprise-grade password complexity requirements

🏒 Enterprise Deployment: Contact SecureNet Enterprise Support for LDAP/AD integration, SSO configuration, and custom role mappings.

πŸ† Founder Access Credentials

Pierre Mvita - Founder, CEO & Chief Technology Officer

Founder Privileges:

  • βœ… Complete Financial Control - All billing, revenue, subscription management
  • βœ… Strategic Business Intelligence - Company-wide analytics, performance metrics
  • βœ… God-Mode System Access - Complete database access, system configuration
  • βœ… Multi-Tenant Management - Create, modify, delete any organization
  • βœ… Emergency Override - Bypass all authentication for system recovery
  • βœ… Compliance Authority - Override compliance settings for business requirements

πŸ“‹ Documentation: Founder Access Guide - Complete founder access documentation

πŸ“‹ Documentation: Founder Implementation Summary - Complete founder implementation documentation


⚑ Quick Start

Prerequisites

  • Python 3.8+ with pip
  • Node.js 16+ with npm
  • PostgreSQL 13+ (for enterprise features) or SQLite (development)
  • Redis (for enhanced features)
  • Git

1. Clone & Setup Backend

git clone https://github.com/pmvita/securenet.git
cd SecureNet

# Create virtual environment
python -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate

# Install dependencies
# For development (SQLite):
pip install -r requirements.txt

# For enterprise (PostgreSQL + full features):
pip install -r requirements-enterprise.txt

2. Database Setup

🏒 Enterprise (PostgreSQL)

# Install PostgreSQL (macOS)
brew install postgresql
brew services start postgresql

# Install and setup PostgreSQL
brew install postgresql                    # macOS
sudo apt-get install postgresql          # Ubuntu/Debian
brew services start postgresql           # macOS
sudo systemctl start postgresql          # Linux

# Create database and user
createdb securenet
createuser -s securenet
psql -c "ALTER USER securenet PASSWORD 'securenet';"

# Run migration to PostgreSQL
python scripts/migrate_to_postgresql.py

πŸ›  Development (SQLite)

# SQLite database will be created automatically at data/securenet.db
# No additional setup required

3. Enterprise Production Startup

🏒 Enterprise Production Mode (Official)

# Official SecureNet Enterprise startup entrypoint
python start_enterprise.py                    # Full enterprise production startup
python start_enterprise.py --check           # Validation only
python start_enterprise.py --validate-roles  # Role validation
python start_enterprise.py --health-check    # System health check

# Complete enterprise environment
./start_enterprise.sh                         # Full enterprise setup with security checks

# Complete production environment (legacy compatibility)
./start_production.sh                        # Full production setup with security checks

πŸš€ Production startup

SecureNet provides comprehensive production startup capabilities with enterprise-grade validation, health monitoring, and CI/CD integration for seamless deployment automation.

πŸ” Enterprise Validation & CI/CD

# Comprehensive enterprise production boot test
python scripts/ops/test_production_boot.py   # Full test suite
python scripts/ops/test_production_boot.py --quick          # Skip server startup
python scripts/ops/test_production_boot.py --enterprise-only # Enterprise tests only

# Expected output: βœ… ALL ENTERPRISE VALIDATION CHECKS PASSED

πŸ”§ CI/CD validation

SecureNet includes comprehensive CI/CD validation pipelines with automated testing, deployment verification, and production readiness assessments for enterprise-grade continuous integration and deployment workflows.

🩺 Health Check Endpoints

# API health monitoring
curl http://localhost:8000/api/health         # System health status
curl http://localhost:8000/api/system/status  # Detailed system information

# Exit codes for CI/CD integration:
# 0 = All validations passed (production ready)  
# 1 = Validation failures detected (deployment blocked)

SecureNet provides comprehensive Health check endpoints for monitoring system status, component health, and production readiness validation with detailed metrics and status reporting for enterprise monitoring systems.

🏒 Enterprise deployment

SecureNet supports enterprise deployment scenarios including on-premise installations, cloud deployments, hybrid architectures, and multi-tenant SaaS configurations with comprehensive security, compliance, and scalability features.

4. Setup Frontend

# New terminal window
cd frontend
npm install

# Build for production
npm run build

# Start production preview
npm run preview

# Alternative: Development mode with mock data
npm run dev

5. Access SecureNet

🏠 Local Development

# Access the application
# Frontend: http://localhost:5173
# Backend: http://localhost:8000

πŸš€ Cloud Deployment (Phase 2)

# Deploy to AWS cloud infrastructure
cd terraform
./deploy.sh

# Access your production application
# Load Balancer: http://[your-load-balancer-url]
# Estimated cost: ~$90/month

πŸ“– Phase 2 Quick Start Guide πŸ“š Full Cloud Deployment Guide


πŸ› οΈ Technology Stack

FastAPI React TypeScript Python PostgreSQL TailwindCSS

Backend: FastAPI β€’ PostgreSQL/SQLite β€’ WebSockets β€’ JWT Auth β€’ Pydantic β€’ Asyncio
Frontend: React 18 β€’ TypeScript β€’ Vite β€’ Tailwind CSS β€’ Heroicons β€’ Axios
AI/ML: Custom algorithms β€’ Scikit-learn β€’ MLflow β€’ Pattern recognition β€’ Behavioral analytics
Enhanced: Redis β€’ RQ β€’ Sentry β€’ Prometheus β€’ Structured logging β€’ Cryptography
Infrastructure: Docker β€’ Kubernetes β€’ Multi-tenant SaaS β€’ Stripe billing β€’ Real-time processing


βœ… Enterprise Readiness Checklist

  • βœ… Role-Based Access Control β€” 3-tier security model (Platform Owner β†’ Security Admin β†’ SOC Analyst)
  • βœ… CVE Integration β€” Real-time NIST NVD API with CISA KEV tracking
  • βœ… SaaS Billing β€” Stripe integration with subscription management
  • βœ… Audit Logging β€” Comprehensive activity tracking and compliance
  • βœ… Predictive Analytics β€” AI-driven threat detection and risk assessment
  • βœ… Multi-Tenant Architecture β€” Organization isolation and management
  • βœ… Real-Time Monitoring β€” WebSocket alerts and live data streaming
  • βœ… API-First Design β€” RESTful endpoints with comprehensive documentation
  • βœ… Docker Support β€” Containerized deployment and scaling
  • βœ… Security Hardening β€” JWT authentication, API keys, session management

🧩 SecureNet Enhanced Architecture

SecureNet now offers two deployment options to meet different operational needs:

🏭 Original SecureNet (app.py)

  • βœ… Production-ready and battle-tested
  • βœ… Full feature set with real-time monitoring
  • βœ… Stable architecture for enterprise deployment
  • βœ… Compatible with existing frontend and workflows

πŸš€ Enhanced SecureNet (app_enhanced.py)

  • βœ… All original features PLUS advanced capabilities
  • πŸ“Š Prometheus metrics and structured logging
  • πŸ” Sentry error monitoring and distributed tracing
  • πŸ€– MLflow experiment tracking and model management
  • ⚑ Redis task queues for background processing
  • πŸ” Advanced cryptography and security services

Seamless Migration: Both versions use the same database and frontend - switch anytime!


πŸ“ Technical Integration Guides

πŸ—οΈ Backend Integration

🎨 Frontend Integration


πŸ“ Complete Documentation Structure

docs/
β”œβ”€β”€ πŸ“– README.md                     # Documentation hub and index
β”œβ”€β”€ πŸ† certification/               # Official certification documents
β”œβ”€β”€ πŸ“‹ audit/                       # Audit reports and validation
β”œβ”€β”€ πŸš€ release/                     # Release notes and summaries
β”œβ”€β”€ 🏒 enterprise/                  # Enterprise-specific documentation
β”œβ”€β”€ πŸ—„οΈ migration/                   # Database migration guides
β”œβ”€β”€ πŸ“¦ setup/                       # Installation and setup guides
β”œβ”€β”€ πŸ—οΈ architecture/                # System architecture documentation
β”œβ”€β”€ πŸ“‘ api/                         # API reference and guides
β”œβ”€β”€ πŸ›‘οΈ features/                    # Feature documentation
β”œβ”€β”€ πŸ”’ compliance/                  # Security and compliance guides
β”œβ”€β”€ πŸ“Š system/                      # System status and monitoring
β”œβ”€β”€ πŸ§ͺ testing/                     # Testing procedures and guides
β”œβ”€β”€ 🀝 contributing/                # Contribution guidelines
β”œβ”€β”€ πŸ“‹ project/                     # Project management, governance, and launch planning
β”œβ”€β”€ πŸ“š reference/                   # Reference documentation and user management
└── πŸ”§ integration/                 # Integration guides and tooling

πŸ’‘ Tip: Start with the Documentation Hub for a complete overview of all available documentation.


πŸ“ Project Structure

SecureNet is organized into logical directories for better maintainability and development workflow:

SecureNet/
β”œβ”€β”€ πŸš€ src/                         # Application source code
β”‚   └── apps/                       # Main application implementations
β”‚       β”œβ”€β”€ app.py                  # Primary FastAPI application (119KB)
β”‚       β”œβ”€β”€ enterprise_app.py       # Enterprise-specific features (22KB)
β”‚       β”œβ”€β”€ app_enhanced.py         # Enhanced application features (13KB)
β”‚       └── setup_enhanced.py       # Advanced configuration management (15KB)
β”‚
β”œβ”€β”€ πŸ“‘ api/                         # API layer organization
β”‚   β”œβ”€β”€ endpoints/                  # RESTful API endpoint implementations
β”‚   β”‚   β”œβ”€β”€ api_admin.py           # Admin management endpoints (21KB)
β”‚   β”‚   β”œβ”€β”€ api_billing.py         # Billing and subscription endpoints (10KB)
β”‚   β”‚   β”œβ”€β”€ api_insights.py        # Analytics and insights endpoints (21KB)
β”‚   β”‚   β”œβ”€β”€ api_metrics.py         # Performance metrics endpoints (14KB)
β”‚   β”‚   └── api_user_groups.py     # User groups management endpoints (5KB)
β”‚   β”œβ”€β”€ services/                  # Business logic services
β”‚   └── middleware/                # API middleware components
β”‚
β”œβ”€β”€ πŸ—ƒοΈ database/                    # Database layer organization
β”‚   β”œβ”€β”€ database.py                # Main database implementation (213KB)
β”‚   β”œβ”€β”€ database_postgresql.py     # PostgreSQL-specific adapter (44KB)
β”‚   β”œβ”€β”€ database_factory.py        # Database factory pattern (2.8KB)
β”‚   β”œβ”€β”€ models.py                  # Core data models (15KB)
β”‚   β”œβ”€β”€ enterprise_models.py       # Enterprise-specific models (20KB)
β”‚   └── postgresql_adapter.py      # PostgreSQL connection adapter (26KB)
β”‚
β”œβ”€β”€ πŸ”’ security/                    # Security and scanning components
β”‚   β”œβ”€β”€ cve_integration.py         # CVE intelligence integration (27KB)
β”‚   β”œβ”€β”€ network_scanner.py         # Network device scanning (15KB)
β”‚   └── secrets_management.py      # Secrets and encryption management (18KB)
β”‚
β”œβ”€β”€ πŸ§ͺ tests/                       # Testing framework
β”‚   β”œβ”€β”€ unit/                      # Unit tests
β”‚   └── integration/               # Integration tests
β”‚
β”œβ”€β”€ πŸ“Š reports/                     # Generated reports and analytics
β”‚   β”œβ”€β”€ validation/                # Sprint validation results
β”‚   β”œβ”€β”€ performance/               # Performance testing results
β”‚   β”œβ”€β”€ compliance/                # Compliance audit reports
β”‚   └── security/                  # Security assessment reports
β”‚
β”œβ”€β”€ πŸ“œ scripts/                     # Organized script management
β”‚   β”œβ”€β”€ validation/                # Sprint validation and testing scripts
β”‚   β”œβ”€β”€ migrations/                # Database migration scripts
β”‚   β”œβ”€β”€ deployment/                # Production deployment scripts
β”‚   β”œβ”€β”€ monitoring/                # System monitoring scripts
β”‚   └── [implementation scripts]   # Core feature implementation scripts
β”‚
β”œβ”€β”€ 🌐 frontend/                    # React frontend application
β”‚   β”œβ”€β”€ src/                       # Frontend source code
β”‚   β”‚   β”œβ”€β”€ components/            # Reusable UI components
β”‚   β”‚   β”œβ”€β”€ pages/                 # Application pages and routes
β”‚   β”‚   └── utils/                 # Frontend utilities and helpers
β”‚   └── public/                    # Static assets and resources
β”‚
β”œβ”€β”€ πŸ“š docs/                        # Comprehensive documentation
β”‚   β”œβ”€β”€ api/                       # API documentation
β”‚   β”œβ”€β”€ deployment/                # Deployment guides
β”‚   β”œβ”€β”€ security/                  # Security documentation
β”‚   └── [documentation categories] # Complete documentation structure
β”‚
β”œβ”€β”€ βš™οΈ config/                      # Configuration management
β”œβ”€β”€ πŸ“ logs/                        # Application logs
β”œβ”€β”€ πŸ” auth/                        # Authentication services
β”œβ”€β”€ πŸ” monitoring/                  # Monitoring and alerting
β”œβ”€β”€ 🐳 k8s/                         # Kubernetes deployment configs
β”œβ”€β”€ πŸ‹ docker-compose.yml           # Docker orchestration
β”œβ”€β”€ πŸ“¦ requirements.txt             # Python dependencies
└── πŸš€ start_enterprise.py          # Enterprise production startup

🎯 Key Directory Benefits

  • πŸ” Easy Navigation: Logical organization makes finding files intuitive
  • πŸ› οΈ Maintainability: Clear separation of concerns reduces complexity
  • πŸ‘₯ Team Collaboration: Consistent structure improves developer productivity
  • πŸ“ˆ Scalability: Organized structure supports project growth
  • πŸ”§ Development Workflow: Streamlined development and testing processes

πŸ—οΈ Architecture Overview

graph TB
    A[🌐 React Frontend] --> B[πŸ”Œ FastAPI Backend]
    B --> C[πŸ—„οΈ PostgreSQL/SQLite Database]
    B --> D[πŸ€– AI/ML Engine]
    B --> E[πŸ” Network Scanner]
    B --> F[πŸ›‘οΈ CVE Intelligence]
    
    G[πŸ“‘ WebSocket] --> A
    H[πŸ”” Real-time Alerts] --> G
    I[πŸ“Š Threat Analytics] --> D
    J[🌍 NIST NVD API] --> F
    K[🏒 Multi-tenant SaaS] --> B
Loading

Core Components:

  • AI-Powered Backend: FastAPI with ML threat detection engine
  • Intelligent Frontend: React 18 with TypeScript and real-time updates
  • Security Engine: Custom vulnerability assessment and risk scoring
  • Network Discovery: Cross-platform device scanning and classification
  • SaaS Infrastructure: Multi-tenant architecture with billing integration

☁️ Deployment & Hosting Options

SecureNet supports multiple deployment environments to meet diverse organizational requirements:

🏒 On-Premise

  • Air-gapped environments with complete offline operation
  • Classified-ready deployment for government and defense contracts
  • SCIF-compatible secure hosting for sensitive compartmented information
  • Hardware security module (HSM) integration for cryptographic operations

☁️ Public Cloud

  • Amazon Web Services (AWS) - EC2, ECS, EKS deployment options
  • Microsoft Azure - Container Instances, AKS, Virtual Machines
  • Google Cloud Platform (GCP) - Compute Engine, GKE, Cloud Run
  • Multi-cloud redundancy for high availability and disaster recovery

🌐 Frontend/Marketing Deployment

  • Vercel Platform - Static frontend deployment for marketing and user acquisition
  • Coming Soon Pages - Early access collection with email signup
  • Independent Branch - Separate deployment from main platform
  • πŸ“š Vercel Deployment Guide - Complete setup and branch management

πŸ”„ Hybrid Cloud

  • SOC/Compliance zone support with data residency controls
  • Edge deployment for distributed security operations
  • Private cloud integration with VMware vSphere, OpenStack
  • Seamless data synchronization between on-premise and cloud components

πŸ”’ SCIF-Ready Secure Hosting

  • TS/SCI clearance environment compatibility
  • TEMPEST-certified hardware deployment options
  • Cross-domain solutions (CDS) integration capability
  • FISMA High/Moderate authorization boundary support

🚦 Development Status

Component Status Description
πŸ€– ML Threat Detection βœ… Production AI-powered anomaly detection and behavioral analysis
πŸ›‘οΈ Security Intelligence βœ… Production CVE integration with NIST NVD and vulnerability scoring
πŸ“Š Analytics Dashboard βœ… Production Real-time security metrics and threat visualization
πŸ”” Notification System βœ… Production WebSocket alerts with smart categorization
πŸ”’ Enterprise Auth βœ… Production JWT + API key authentication with RBAC
πŸ“± Responsive UI βœ… Production Modern interface with mobile support
πŸ“¦ SaaS Infrastructure βœ… Production Multi-tenant architecture with billing
πŸ“š Documentation βœ… Complete Comprehensive guides and API reference

🀝 Contributing

We welcome contributions to SecureNet! Here's how to get started:

  1. πŸ“– Read: Review our Contributing Guidelines
  2. 🍴 Fork: Create your feature branch (git checkout -b feature/ai-enhancement)
  3. πŸ”¨ Develop: Build and test with real network environment
  4. βœ… Test: Validate AI features and ML model performance
  5. πŸ“ Document: Update relevant documentation files
  6. πŸš€ Submit: Push branch and open a Pull Request

See CONTRIBUTING.md for detailed development workflow and coding standards.


πŸ“ž Support & Community

πŸ“– Getting Help

πŸ› Issues & Feedback

πŸ’¬ Community & Resources


πŸ“„ License

Copyright (c) 2025 Pierre Mvita. All Rights Reserved.

This software is proprietary and confidential. See the LICENSE.txt file for complete terms and conditions.


πŸ›‘οΈ SecureNet β€” AI-Powered Network Security Monitoring & Management

Built for cybersecurity professionals, SOC teams, and enterprise security operations


Pierre Mvita β€’ LinkedIn β€’ SecureNet.ai

Transforming cybersecurity through artificial intelligence