CyberPulse — Cyber Posture Intelligence Platform

Securing African Business, One Domain at a Time

CyberPulse is a full-stack SaaS platform that gives South African SMEs an instant, comprehensive cyber security posture score — complete with AI-generated risk narratives, dark web monitoring, insurance readiness scoring, and tamper-proof PDF attestations.

---

Architecture

┌─────────────────────────────────────────────────────────────────┐
│                        CYBERPULSE                               │
│                                                                 │
│  ┌──────────────┐    ┌──────────────┐    ┌──────────────────┐  │
│  │  Next.js 16  │    │  Prisma ORM  │    │   PostgreSQL DB  │  │
│  │  App Router  │◄──►│  (schema)    │◄──►│   (data store)   │  │
│  │  TypeScript  │    └──────────────┘    └──────────────────┘  │
│  └──────┬───────┘                                               │
│         │                                                       │
│  ┌──────▼───────────────────────────────────────────────────┐  │
│  │                    SCANNER ENGINE                         │  │
│  │  dns-email │ ssl-tls │ http-headers │ open-ports │ cve   │  │
│  │  backup-hygiene │ dark-web (HIBP)                         │  │
│  └──────┬───────────────────────────────────────────────────┘  │
│         │                                                       │
│  ┌──────▼──────────┐    ┌────────────────┐    ┌─────────────┐  │
│  │  AI MODULE      │    │  SCCA MODULE   │    │  REPORTS    │  │
│  │  Claude Sonnet  │    │  AES-256-GCM   │    │  PDF (react-│  │
│  │  Narratives     │    │  Merkle HMAC   │    │  pdf)       │  │
│  │  Underwriting   │    │  SSE Streams   │    └─────────────┘  │
│  └─────────────────┘    └────────────────┘                     │
└─────────────────────────────────────────────────────────────────┘

---

SCCA Integration

CyberPulse integrates the SCCA Protocol (Secure Cryptographic Compliance Architecture) for three core functions:

1. Encryption — All sensitive scan results are encrypted using AES-256-GCM with HKDF-derived keys before storage. The master key is stored in SCCA_MASTER_KEY.

2. Integrity Chain — Each scan report is hashed using a Merkle-HMAC chain (HMAC-SHA256). The root hash is stored alongside the report. Before any report is served via the API, the integrity root is re-verified — a 409 error is returned if tampering is detected.

3. SSE Streaming — Real-time scan progress is streamed to the client using Server-Sent Events, allowing the UI to update as each scan category completes.

---

Setup Instructions

1. Prerequisites

• Node.js 18+
• PostgreSQL 14+
• npm or yarn

2. Install Dependencies

npm install

3. Configure Environment

Create .env.local with at least NEXTAUTH_SECRET, NEXTAUTH_URL and SCCA_MASTER_KEY (see the table below). Generate secrets with:

node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"

No database needed for scanning. On localhost, /scan (free scan) and /dashboard/scan/new (full report + PDF) work without PostgreSQL or an account. The database is only needed for accounts, saved scan history, and attestations.

4. Database Setup

npx prisma generate
npx prisma migrate dev --name init

5. Run Development Server

npm run dev

Open http://localhost:3000

---

Environment Variables

---

API Route Reference

---

Scan Checks

Free tier includes: DNS/Email, SSL/TLS, HTTP Headers, Dark Web only.

---

AI Features

---

Roadmap

Phase 1 — MVP (Current)

• 6-category automated security scan
• AI risk narratives and underwriting scoring
• Dark web monitoring via HIBP
• Tamper-proof PDF attestations
• Free public scanner with lead capture
• SCCA encryption and integrity chain

Phase 2 — Insurer API

• Cyan Insurance API integration
• Real-time policy quoting
• Automated premium calculation from underwriting score
• Broker dashboard and white-label options

Phase 3 — White-label & Scale

• Multi-tenant white-label deployment
• MSP (Managed Service Provider) portal
• Continuous monitoring with daily rescans
• SIEM integration (Splunk, Microsoft Sentinel)
• Compliance mapping (ISO 27001, POPIA, SOC 2)