security-analytics

tirreno is an open-source framework for in-house security. Event tracking, risk scoring and threat detection for your system.

Cloud Security Operations Orchestrator

vPrioritizer enables us to understand the contextualized risk (vPRisk) on asset-vulnerability relationship level across the organization, for teams to make more informed decision about what (vulnerability/ties) they should remediate (or can afford not to) and on which (asset/s)

Security Analytics Engine - Anomaly Detection in Web Traffic

Detection of network traffic anomalies using unsupervised machine learning

Real-time log ingestion and anomaly detection pipeline using AWS Kinesis, OpenSearch, and Python for mock EC2 log generation and alerting.

Power Query collection for SentinelOne - KQL queries, data transformations, and analysis templates for security operations and threat hunting

Digital Twin Driven Security Analytics for the Industrial Internet of Things.

AI-powered cybersecurity monitoring platform that detects suspicious digital attacks, analyzes threat patterns, visualizes intrusion risks, and assists in proactive cyber defense management.

Plug into extended SecOps: Bring Google Cloud's analytics to your local network. tshark captures on-prem, GCP transforms to UDM. Scalable, event-driven, via Terraform.

AI-powered intrusion detection and incident analysis system that combines machine learning, explainable AI (SHAP), and retrieval-augmented generation (RAG) to detect network attacks and generate security incident reports.

Production-ready authentication framework that saves you weeks of development. Features enterprise-grade security: 2FA/TOTP, LDAP integration, intelligent rate limiting, session fingerprinting, brute-force protection, security analytics dashboard, comprehensive audit logging, and granular role-based access control.

SENTINEL SOC is a professional-grade Security Operations Center (SOC) dashboard that simulates real-world threat detection, investigation, and response workflows. Built with React and Recharts, it features live alert monitoring, interactive investigation playbooks with terminal-style execution, global attack maps, real-time CVE intelligence🔒.

This repository contains an end-to-end walkthrough to leverage Google Cloud services to demonstrate Solution Accelerators for few business domains

An end-to-end AI system for detecting insider threats using a hybrid machine learning approach (Isolation Forest + XGBoost). Features a high-performance ETL pipeline using DuckDB, real-time inference via FastAPI, and integrated Explainable AI (SHAP) for transparent risk assessment on the CERT R4.2 dataset.

Standalone edge protection sensor and fleet management platform

AI-powered dashboard for global cyber threats, trends, and defense.

Open-source, self-hosted GRC evidence platform: collect read-only evidence, evaluate controls, and export reviewable audit workpapers.

🛡️ CyberSentinel – Threat Intel + Log Correlation Dashboard. An analyst-grade security tool that ingests threat intelligence, parses SSH/Apache logs, correlates IOCs, and generates real-time alerts.