Enterprise-grade cybersecurity platform for API protection, real-time attack detection, and threat intelligence visualization.
DevShield is a comprehensive SaaS solution designed to protect modern APIs from cyber threats, detect suspicious activities in real-time, and provide actionable security insights through an intuitive dashboard.
DevShield provides enterprise-level API security through:
- 🔐 API Protection: Intelligent request filtering, rate limiting, and authentication enforcement
- 🎯 Attack Detection: Real-time threat identification using pattern recognition and behavioral analysis
- 📊 Threat Visualization: Interactive dashboards with live security metrics and attack timelines
- 🔔 Alert System: Instant notifications for critical security events
- 📈 Analytics: Comprehensive security insights and trend analysis
- API Gateway Protection: Intercepts and validates all API requests
- DDoS Mitigation: Advanced rate limiting and traffic pattern analysis
- SQL Injection Detection: Pattern-based query validation
- XSS Prevention: Input sanitization and output encoding
- CSRF Protection: Token-based request verification
- JWT Authentication: Secure, stateless user authentication
- Role-Based Access Control (RBAC): Granular permission management
- Real-Time Dashboard: Live threat feed with WebSocket updates
- Attack Timeline: Visual representation of security events
- Threat Heatmap: Geographic visualization of attack sources
- Performance Metrics: API response times and system health
- Historical Analysis: Trend identification and pattern discovery
- Custom Alerts: Configurable notification rules
- Multi-Tenant Architecture: Isolated environments for each customer
- API Key Management: Secure credential generation and rotation
- Whitelist/Blacklist: IP and domain-based access control
- Audit Logging: Comprehensive security event tracking
- Compliance Reports: Export security data for regulatory requirements
⚛️ React 18+ with TypeScript
🎨 TailwindCSS / Material-UI
📊 Recharts / D3.js (Data Visualization)
🔌 Socket.io Client (Real-time updates)
🗂️ Redux Toolkit (State Management)
📡 Axios (HTTP Client)
🚀 Node.js + Express.js
📘 TypeScript
🗄️ MongoDB + Mongoose
🔌 Socket.io (WebSockets)
🔐 JWT + Passport.js (Authentication)
⚡ Redis (Caching & Rate Limiting)
📧 Nodemailer (Email Notifications)
🧪 Jest + Supertest (Testing)
🐳 Docker + Docker Compose
☁️ AWS / Azure / GCP ready
🔄 GitHub Actions (CI/CD)
📊 Prometheus + Grafana (Monitoring)
🔍 ELK Stack (Logging)
- Node.js 18+ and npm/yarn
- MongoDB 5.0+
- Redis 6.0+ (for caching and rate limiting)
- Docker (optional, for containerized deployment)
1. Clone the Repository
git clone https://github.com/DIYA73/devshield-saas.git
cd devshield-saas2. Backend Setup
cd devshield-backend
npm install
# Create environment file
cp .env.example .env
# Configure your .env file:
# PORT=5000
# MONGODB_URI=mongodb://localhost:27017/devshield
# REDIS_URL=redis://localhost:6379
# JWT_SECRET=your_secure_secret_key
# NODE_ENV=development3. Frontend Setup
cd ../devshield-frontend
npm install
# Create environment file
cp .env.example .env
# Configure your .env file:
# REACT_APP_API_URL=http://localhost:5000
# REACT_APP_SOCKET_URL=http://localhost:50004. Start MongoDB and Redis
# Option A: Using Docker
docker-compose up -d mongodb redis
# Option B: Local installation
mongod
redis-server5. Run the Application
Backend (Terminal 1):
cd devshield-backend
npm run devFrontend (Terminal 2):
cd devshield-frontend
npm start6. Access the Application
Frontend: http://localhost:3000
Backend API: http://localhost:5000
Quick Deploy with Docker Compose:
docker-compose up -dThis will start:
- Frontend (React) on port 3000
- Backend (Node.js) on port 5000
- MongoDB on port 27017
- Redis on port 6379
devshield-saas/
├── devshield-frontend/ # React TypeScript Frontend
│ ├── src/
│ │ ├── components/ # Reusable UI components
│ │ ├── pages/ # Page components
│ │ ├── features/ # Redux slices
│ │ ├── services/ # API services
│ │ ├── utils/ # Helper functions
│ │ ├── hooks/ # Custom React hooks
│ │ ├── types/ # TypeScript definitions
│ │ └── App.tsx # Main app component
│ ├── public/
│ ├── package.json
│ └── tsconfig.json
│
├── devshield-backend/ # Node.js TypeScript Backend
│ ├── src/
│ │ ├── controllers/ # Request handlers
│ │ ├── models/ # MongoDB schemas
│ │ ├── routes/ # API routes
│ │ ├── middleware/ # Custom middleware
│ │ ├── services/ # Business logic
│ │ ├── utils/ # Helper functions
│ │ ├── config/ # Configuration files
│ │ ├── validators/ # Input validation
│ │ └── server.ts # Express app setup
│ ├── tests/ # Unit & integration tests
│ ├── package.json
│ └── tsconfig.json
│
├── backend/ # Legacy or alternative backend
├── screenshots/ # Project screenshots
├── docker-compose.yml # Container orchestration
├── .gitignore
├── README.md
└── LICENSE
Client Request
↓
API Gateway (Express)
↓
Rate Limiter (Redis)
↓
Authentication (JWT)
↓
Input Validation
↓
Threat Detection Engine
↓
Business Logic
↓
Database (MongoDB)
↓
Response + Logging
- Request Analysis: Parse HTTP headers, body, and parameters
- Pattern Matching: Check against known attack signatures
- Behavioral Analysis: Compare against user baseline behavior
- Risk Scoring: Calculate threat level (0-100)
- Action Determination: Allow, block, or flag for review
- Logging & Alerting: Record event and notify if critical
POST /api/auth/register # Create new account
POST /api/auth/login # User login
POST /api/auth/logout # User logout
POST /api/auth/refresh-token # Refresh JWT
POST /api/auth/forgot-password # Password reset
POST /api/shield/protect # Enable protection for an API
GET /api/shield/status # Check protection status
PUT /api/shield/config # Update security rules
DELETE /api/shield/disable # Disable protection
GET /api/threats # List detected threats
GET /api/threats/:id # Get threat details
POST /api/threats/:id/review # Mark threat as reviewed
POST /api/threats/:id/whitelist # Add to whitelist
GET /api/analytics/dashboard # Dashboard metrics
GET /api/analytics/timeline # Threat timeline
GET /api/analytics/heatmap # Geographic threat map
GET /api/analytics/export # Export security reports
connect # Client connection
threat:detected # Real-time threat alert
metrics:update # Live dashboard update
attack:blocked # Attack prevention notification
Run Backend Tests:
cd devshield-backend
npm test # Run all tests
npm run test:watch # Watch mode
npm run test:coverage # Coverage reportRun Frontend Tests:
cd devshield-frontend
npm testEnd-to-End Tests:
npm run test:e2e- Request Processing: <50ms average latency
- Threat Detection: <100ms analysis time
- WebSocket Updates: <10ms real-time delivery
- Horizontal Scaling: Load balancer ready
- Database Optimization: Indexed queries, connection pooling
- Caching Strategy: Redis for frequently accessed data
- CDN Integration: Static asset delivery optimization
- Environment variables configured
- Database backups automated
- SSL/TLS certificates installed
- Rate limiting configured
- Monitoring alerts set up
- Logging infrastructure ready
- Security headers enabled
- CORS policies configured
- API documentation published
- Frontend: Vercel, Netlify, AWS Amplify
- Backend: AWS EC2, DigitalOcean, Heroku, Render
- Database: MongoDB Atlas, AWS DocumentDB
- Cache: Redis Cloud, AWS ElastiCache
- Monitoring: Datadog, New Relic, Sentry
GitHub Actions workflow automatically:
- ✅ Runs TypeScript type checking
- ✅ Executes unit and integration tests
- ✅ Performs security vulnerability scanning
- ✅ Builds production bundles
- ✅ Deploys to staging/production
- ✅ Runs smoke tests post-deployment
We welcome contributions! Please follow these steps:
- Fork the repository
- Create a feature branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
Development Guidelines:
- Write TypeScript (strict mode)
- Follow ESLint/Prettier configuration
- Write tests for new features
- Update documentation
- Follow conventional commits
- Core API protection
- Basic threat detection
- Real-time dashboard
- User authentication
- Machine learning-based anomaly detection
- Advanced DDoS mitigation
- Multi-region deployment
- Custom rule engine
- Mobile app (React Native)
- Blockchain-based audit logs
- AI-powered threat prediction
- Integration marketplace
This project is licensed under the MIT License - see the LICENSE file for details.
Diya
- GitHub: @DIYA73
- LinkedIn: [https://www.linkedin.com/in/didi-86b00329a]
- OWASP Top 10 security guidelines
- Node.js security best practices
- Open-source security community
- Contributors and supporters
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Email: diyaismail7@gmail.com
⭐ If you find DevShield useful, please consider starring the repository!
🛡️ Securing APIs, one request at a time.