Enterprise-Grade Forensic Incident Response Platform
Secure. Scalable. Admissible.
The development environment includes hot-reloading and simulated agents.
./start.sh- Frontend: http://localhost:3000
- Backend API: http://localhost:8000/docs
- Auth: Disabled by default for demo speed. Enable with
REQUIRE_AUTH=true.
Live AI (Local, always-on) runs via Ollama for fast, safe summaries and next steps.
Deep AI (On-demand) also runs locally when a user explicitly clicks “Run Deep Analysis”.
Recommended local model (from your Ollama list):
OLLAMA_MODEL=mistral:7b-instruct-q5_K_M
Agent: Run the agent as Administrator (Windows) or root (Linux) for full visibility and prevention (firewall, process/network scan, config read). The start scripts will re-launch elevated if needed.
.\start.ps1
# Agent: run as Administrator (script will prompt to elevate if needed)
.\agent\start_agent.ps1start.cmd
REM Agent: right-click PowerShell -> Run as Administrator, then:
agent\start_agent.ps1./start.sh
# Agent: run as root (script will re-exec with sudo if not root)
sudo ./agent/start_agent.sh./scripts/update.sh.\scripts\update.ps1scripts\update.cmdThe agent service runs as root for full capability. Copy service files from deploy/systemd/ to /etc/systemd/system/, then:
sudo systemctl daemon-reload
sudo systemctl enable cyberguard-backend cyberguard-frontend cyberguard-agent
sudo systemctl start cyberguard-backend cyberguard-frontend cyberguard-agentRun as Administrator:
.\deploy\windows\install_services.ps1 -Root "C:\cyberguard"
Start-Service CyberGuardBackend
Start-Service CyberGuardAgentRemove:
.\deploy\windows\uninstall_services.ps1We provide a 1-Click Deployment Script for Cloud environments (AWS/GCP/Azure).
cd deployment && ./DEPLOY_PROD.shArchitecture:
- Frontend: Next.js (Standalone Alpine Container)
- Backend: FastAPI (Non-root user, optimized)
- Database: PostgreSQL 15 (Isolated Network)
- Gateway: Nginx (TLS Termination)
- 👉 INVESTOR PITCH & DEMO SCRIPT
- Contains: 5-Minute Script, Judge Q&A, and Roadmap.
- Hardening Summary
- Overview of Security & Forensic validations.
- Technical Final Report
- Deep dive into code implementation.
- Chain of Custody: We don't just log actions; we cryptographically sign them (SHA-256).
- Multi-Tenancy: Built from day one for Service Providers (MSSPs).
- SaaS-Ready: User Management, RBAC, and Billing hooks are pre-integrated.
Ready for Demo Day 2026