A Lightweight Endpoint Security Analyzer with Risk Scoring & Interactive Dashboard
SentinelLite is a Python-based security analysis tool that inspects your local system for potential risks and presents a structured security assessment through an interactive web dashboard. It is designed to demonstrate practical concepts in system security, risk modeling, and monitoring.
Modern systems often run multiple services and processes that can unintentionally expose vulnerabilities. SentinelLite helps identify these risks by analyzing:
- Open network ports
- Running processes
- Firewall status
- Privilege levels
It then converts this data into a quantified risk score, along with actionable recommendations.
- Detects open/listening ports
- Identifies privilege level (user vs admin/root)
- Checks firewall status
- Flags potentially suspicious processes
- Context-aware scoring model
- Differentiates between common and suspicious ports
- Includes process-based risk signals
- Produces a structured risk breakdown
- Generates targeted hardening suggestions
- Based directly on detected system conditions
- Real-time risk score display
- Category-wise breakdown visualization
- Recommendations panel
- Clean and minimal UI powered by Flask + Chart.js
SentinelLite/
โ
โโโ agent.py # Collects system data
โโโ risk.py # Risk scoring engine
โโโ hardening.py # Recommendation generator
โโโ dashboard.py # Flask backend
โ
โโโ templates/
โ โโโ index.html # Frontend UI
โ
โโโ screenshots/ # Project visuals
โโโ requirements.txt
โโโ README.md
Clone the repository and install dependencies:
git clone https://github.com/tanush-0/sentinelite.git
cd sentinelite
pip install -r requirements.txtpython agent.pypython dashboard.pyhttp://127.0.0.1:5000
The total risk score (0โ100) is derived from multiple weighted factors:
| Category | Description |
|---|---|
| Privilege | Elevated privileges increase risk |
| Ports | Suspicious ports carry higher weight |
| Firewall | Disabled firewall significantly increases risk |
| Processes | Suspicious processes raise risk |
| Services | Higher system exposure increases score |
- Snapshot-based analysis (no real-time monitoring yet)
- Limited OS-specific recommendations
- No external vulnerability (CVE) integration
- Basic process detection using keyword matching
- Real-time monitoring and alert system
- Advanced process behavior analysis
- Integration with threat intelligence sources
- Authentication for dashboard access
- OS-specific security hardening automation
Tanush
This project is licensed under the MIT License.


