Cyber Attack Monitoring Dashboard
Real-time threat intelligence and investigation toolkit for security analysts.
0
client API keys
Credentials stay behind server-side route proxies.
3
core lookup types
IP, domain, and CVE workflows share one investigation surface.
5+
security controls
Headers, validation, caching, safe links, and protected configuration.
01 / Visual evidence
Screenshots and workflow
Threat feed workspace
Live indicators, risk scores, and investigation shortcuts in one analyst view.
Investigation surface
The same workflow keeps IP, domain, and CVE context close to the analyst.
02 / System design
Architecture diagram
Analyst
- Next.js UI
- TanStack Query cache
- Recharts visualizations
Application
- Server-side API routes
- Input validation
- Security headers
Intelligence
- AbuseIPDB
- CIRCL CVE
- VirusTotal / OTX / Shodan links
A server-mediated lookup flow keeps third-party credentials away from the browser while the client focuses on investigation and visualization.
Evidence
Sanitized report
Public verification snapshot from the production review. Values describe controls and scope, not private targets.
SCOPE: public dashboard controls
RESULT: secrets remain server-side
NOTE: target identifiers and provider response bodies removed03 / Verification
Testing methodology
Threat-model the browser boundary
Mapped every external lookup and marked credentials, user input, and provider responses as separate trust boundaries.
Exercise the lookup routes
Tested valid, malformed, empty, and provider-error inputs before wiring results into the UI.
Review deployment controls
Checked headers, client bundles, outbound links, responsive states, and loading/error behavior on the deployed build.
04 / Ownership
What I personally contributed
Clear ownership matters in security work. These are the decisions and deliverables I directly handled for this project.
- Owned the product direction, threat model, and end-to-end implementation.
- Designed the route-proxy boundary and integrated the threat-intelligence providers.
- Built the analyst UI, charts, loading states, error states, and responsive behavior.
- Configured deployment, security headers, analytics, and the public documentation.
