Protecting digital life with AES-256 encryption, password management, network scanning, file vaulting, and hands-on security education.
- Screenshots
- Executive Snapshot
- Why CyberSuite Stands Out
- Core Modules
- Tech Stack
- Security Architecture
- Installation
- Project Structure
- API Endpoints
- Testing
- Contributing
- License
- Author
CyberSuite is a full-stack cybersecurity platform built to showcase practical security engineering in one product. It combines encrypted credential storage, protected file handling, live network scanning, two-factor authentication, ML-assisted threat analysis, and guided security education into a single polished experience.
This README is designed to make the value obvious quickly for managers, recruiters, and technical reviewers: the product looks professional, the security story is clear, and the implementation spans frontend, backend, and ML services.
| Security First AES-256-GCM, 2FA, HttpOnly cookies, and validation-driven flows. |
Real Features Password vault, network scanner, file vault, and ML support. |
Presentation Ready A polished product story designed to win fast attention. |
| Capability | Value |
|---|---|
| Password Security | AES-256-GCM encrypted credential vault with search, filtering, and strength analysis |
| Network Scanning | TCP-based scanning for common ports and security exposure checks |
| File Protection | Encrypted upload and secure download flow for sensitive files |
| Security Training | Course-based education module with progress tracking |
| ML Intelligence | Login anomaly detection and password analysis support |
CyberSuite is more than a demo app. It presents a coherent security platform with a strong visual identity and a practical feature set that maps directly to real-world concerns.
| What a recruiter sees | Why it matters |
|---|---|
| Clear product vision | It reads like a finished platform, not a classroom exercise |
| Real engineering depth | Security, backend, frontend, and ML all show up in one system |
| Strong product polish | The first screen communicates confidence and momentum |
- Zero-knowledge style password storage with authenticated encryption
- Real network scanning instead of placeholder UI
- Secure file vault behavior with client-side protection flow
- 2FA support and security settings surfaced in the user experience
- Educational content to demonstrate product thinking beyond raw tooling
- A polished landing page that communicates value fast
| π Password Manager Encrypted credential storage with generation, analysis, and retrieval. |
π΅οΈ Network Scanner Authorized TCP scanning with exposure hints and readable results. |
| π¦ File Vault Encrypted upload and download handling for sensitive documents. |
π Security Education Course-based learning with progress tracking and practical guidance. |
| π‘οΈ Two-Factor Authentication TOTP verification, QR setup, and backup recovery codes. |
π€ ML Security Intelligence Anomaly detection and password analysis through a dedicated service. |
- AES-256-GCM credential encryption
- Password generation and strength analysis
- Search, filtering, and category organization
- Secure storage and retrieval flows
- TCP port scanning for common service ports
- Hostname and IP-based scanning support
- Vulnerability and exposure hints for insecure services
- Console-style and dashboard-style scanning views
- Encrypted file upload and download flow
- Metadata tracking and access control
- Secure handling for sensitive documents
- Course-based learning experience
- Progress tracking across lessons
- Content aimed at security awareness and best practices
- TOTP-based verification flow
- QR code setup for authenticator apps
- Backup code support for recovery
- Login anomaly detection support
- Password analysis enhancements
- Separate Python microservice for ML workloads
| π§± Frontend Next.js 15, React 19, TypeScript, Tailwind CSS, shadcn/ui |
βοΈ Backend Node.js, Express, MongoDB, Mongoose, JWT, bcryptjs, Multer |
π§ͺ ML Service Python 3.x, Flask, scikit-learn, pandas, numpy, joblib |
- Next.js 15
- React 19
- TypeScript
- Tailwind CSS
- shadcn/ui
- Node.js
- Express.js
- MongoDB
- Mongoose
- JWT
- bcryptjs
- Multer
- Speakeasy
- Nodemailer
- Python 3.x
- Flask
- scikit-learn
- pandas
- numpy
- joblib
CyberSuite is built around defense-in-depth.
| πͺͺ Identity & Session JWT, HttpOnly cookies, SameSite enforcement, and 2FA. |
π§· Data Protection AES-256-GCM, secure file handling, and encrypted credential flows. |
| π§± App Hardening Helmet, rate limiting, validation, and size limits. |
β‘ Operational Safety Dedicated ML service and controlled password reset flows. |
- Authenticated encryption for sensitive credential and file workflows
- HttpOnly cookie-based session handling
- CSRF-aware cookie configuration
- Input validation on user-facing endpoints
- Rate limiting and security headers
- Password reset flow with time-limited tokens
- Separate ML service for isolated processing
| Step 1 | Step 2 | Step 3 |
|---|---|---|
| Clone | Configure | Run |
- Node.js 18 or later
- MongoDB 6 or later
- Python 3.8 or later for ML features
- npm or pnpm
git clone https://github.com/Git-brintsi20/CyberSuite.git
cd CyberSuite/cybersecurity-suitecd server
npm installCreate server/.env:
MONGO_URI=your_mongodb_connection_string
JWT_SECRET=your_jwt_secret_key
ENCRYPTION_KEY=your_64_character_hex_key
PORT=5000
NODE_ENV=development
FRONTEND_URL=http://localhost:3000
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your_email@gmail.com
SMTP_PASSWORD=your_app_password
EMAIL_FROM=CyberSuite <your_email@gmail.com>
ML_SERVICE_URL=http://localhost:5001cd ../client
npm installCreate client/.env.local:
NEXT_PUBLIC_API_URL=http://localhost:5000cd ../server/ml_service
pip install -r requirements.txtBackend:
cd server
npm startFrontend:
cd client
npm run devML service:
cd server/ml_service
python app.pyThe structure is intentionally split between a modern frontend, a secure API layer, and an isolated ML service.
cybersecurity-suite/
βββ client/ # Next.js frontend application
β βββ app/ # App Router pages
β βββ components/ # UI and feature components
β βββ contexts/ # React context providers
β βββ hooks/ # Custom hooks
β βββ lib/ # Utilities and API helpers
βββ server/ # Express backend and services
βββ controllers/ # Request handlers
βββ middleware/ # Auth and logging middleware
βββ models/ # MongoDB models
βββ routes/ # API routes
βββ utils/ # Encryption and helper utilities
βββ ml_service/ # Python ML microservice
The API surface is organized around the productβs major workflows so the architecture stays easy to understand.
POST /api/auth/registerPOST /api/auth/loginPOST /api/auth/login/2faPOST /api/auth/logoutGET /api/auth/me
GET /api/passwordsPOST /api/passwordsPUT /api/passwords/:idDELETE /api/passwords/:idPOST /api/passwords/:id/decrypt
POST /api/2fa/setupPOST /api/2fa/verifyPOST /api/2fa/validatePOST /api/2fa/disableGET /api/2fa/status
GET /api/filesPOST /api/files/uploadGET /api/files/:id/downloadDELETE /api/files/:id
GET /api/ml/healthPOST /api/ml/analyze-passwordPOST /api/ml/detect-anomalyPOST /api/ml/train
GET /api/education/coursesGET /api/education/courses/:idPOST /api/education/progress
Use the application locally and verify the main flows:
| 01 | Open the app and confirm the landing page loads cleanly. |
| 02 | Create an account or log in and verify authentication. |
| 03 | Exercise the password manager, file vault, scanner, and education flows. |
- Open
http://localhost:3000 - Register or log in
- Test the password manager and file vault
- Run a scan in the network scanner
- Review the education module and profile settings
Contributions are welcome. Please keep changes focused, secure, and consistent with the current architecture.
| Fork | Branch | Commit | Pull Request |
|---|
- Fork the repository
- Create a feature branch
- Commit your changes
- Open a pull request
This project is licensed under the MIT License. See LICENSE for details.
Git-brintsi20
- GitHub: @Git-brintsi20
- Repository: CyberSuite
If this project helps, star it and share the demo.
Made with care for a more secure digital world.












