Cyber Attack Monitoring Dashboard
Real-time threat intelligence and investigation toolkit for security analysts.
Challenge
Security analysts often need a unified view of live threat indicators with quick investigation tools for IPs, domains, and CVEs — but building that usually means juggling multiple APIs and manual data correlation, with the risk of exposing API keys on the client.
Approach
Built a Next.js App Router dashboard with server-side API routes to proxy AbuseIPDB and CIRCL CVE lookups, keeping all secrets off the client. Used TanStack Query for data caching, Recharts for threat visualizations, and Radix UI primitives for an accessible, polished interface.
Outcome
A deployed, production-grade dashboard on Vercel with security headers, analytics, and a live threat feed. Users can search IPs, domains, and CVEs, view risk scores, read mitigation guidance, and follow outbound links to VirusTotal, Shodan, and AlienVault OTX.
Key Results
- Zero client-side API key exposure via server-side route proxying
- Live IP reputation lookups through AbuseIPDB integration
- Responsive dark-mode interface with production security headers
- Deployed on Vercel with automated CI/CD and Speed Insights
