A modern, full-stack Governance, Risk, and Compliance (GRC) platform built to help organizations map their digital assets, identify security risks, implement protective controls, and track regulatory compliance.
Built with a premium, responsive Single Page Application (SPA) frontend and a robust Node.js backend.
- 📊 Comprehensive Dashboard — Real-time overview of your security posture, risk distribution, and compliance status.
- 🔐 Role-Based Access Control (RBAC) — Secure, granular access with distinct permissions for
AdminandAnalystroles. - 🗄️ Asset & Risk Management — Track infrastructure, map vulnerabilities, and assign risk levels (Critical, High, Medium, Low).
- 🛡️ Controls & Compliance mapping — Implement security controls (e.g., MFA, WAF, Encryption) and map them directly to regulatory frameworks like GDPR, ISO 27001, SOC 2, and PCI DSS.
- 🛠️ Admin Control Panel — Dedicated administration interface for managing users, securely reviewing password change requests, and auditing archived records.
- Backend: Node.js, Express.js
- Database: PostgreSQL
- ORM: Prisma 7
- Frontend: Vanilla HTML/CSS/JS (SPA Architecture)
- Authentication: Express Sessions & Bcrypt
- Styling: Custom Vanilla CSS (Dark-mode focused, glassmorphism design)
If you're running this project locally, please refer to the detailed guide below:
👉 View the Running Guide (RUNNING_GUIDE.md)
It includes:
- Prerequisites and Database setup
- Step-by-step installation instructions
- Default login credentials for testing
- Explanations of the included
.batautomation scripts (run.bat,stop.bat,reset-db.bat)
