Skip to content

chmosama/Secvora

Secvora — The Security Intelligence Engine

License: MIT Stack: Next.js 14 Infrastructure: Cloudflare Vibe Coded

Secvora is an autonomous security operations knowledge platform designed to solve documentation entropy. This is a vibe coded app—built with intelligence, speed, and a focus on intuitive security workflows.

Why Secvora?

In high-pressure security environments, documentation is often the first thing to break. Incident notes live in Slack threads, and SOPs become stale in static wikis. Secvora bridges this gap by using AI to capture context as it happens and mapping it into a live Security Knowledge Graph.

Core Pillars

  • 🧠 Autonomous Extraction: Converts raw human notes into structured SOPs and Runbooks using LLM orchestration.
  • 🕸️ Security Knowledge Graph: Visualizes the connections between your systems, policies, and teams.
  • 🛡️ High-Fidelity Governance: A built-in "Human-in-the-loop" approval workflow ensuring technical accuracy.
  • ⚡ Edge-Native Architecture: Built entirely on Cloudflare and Supabase for global performance and security.

Interface Preview

Landing Page Login Portal
Landing Page Login Page
Operations Dashboard Security Knowledge Graph
Dashboard Graph
AI SOP Terminal Integrations Management
SOP Terminal Integrations

Quick Start (5 Minutes)

Secvora is designed to be self-hosted.

  1. Database: Create a Supabase project and run the Base Migration.
  2. Infrastructure: Deploy the AI Worker to Cloudflare to handle native embeddings.
  3. API: Deploy the Hono Backend to Cloudflare Workers with your secrets.
  4. Dashboard: Deploy the Next.js Frontend to Cloudflare Pages.

For detailed instructions, see the Deployment Guide.


Architecture Overview

Secvora runs on a distributed edge-native stack:

  • Frontend: Next.js 14 (App Router) + TailwindCSS + NyxUI.
  • API: Hono + Cloudflare Workers.
  • Database: Supabase (PostgreSQL + pgvector + ltree).
  • AI: Cloudflare Workers AI (Embeddings) + OpenRouter (Inference).

See the Technical Architecture for a deep dive into the engine's design.


Roadmap

We are actively expanding Secvora's capabilities. Current focus areas:

  • Slack Integration (In Progress): Native event handling for real-time note capture.
  • Jira Workflow Sync: Automatic status updates in Jira when SOPs are published.
  • Multi-Vector Search: Enhancing hybrid search with local keyword indexing.
  • Advanced Visualization: Interactive 3D graph view for complex infrastructure.

Project Structure

.
├── backend/       # Hono API (Cloudflare Worker)
├── frontend/      # Next.js Dashboard (Cloudflare Pages)
├── worker-ai/     # Embedding Service (Cloudflare Worker AI)
├── supabase/      # Database migrations & configuration
├── docs/          # Full documentation suite
└── README.md

Contributing

We welcome contributions from the security community! Please see our Management Guide to understand how to set up a development environment.

License

This project is licensed under the MIT License - see the LICENSE file for details.

About

Autonomous Security Operations Engine for real-time SOP generation, incident orchestration, and knowledge graph visualization. AI-native SecOps built on Cloudflare & Supabase.

Topics

Resources

License

Code of conduct

Contributing

Stars

Watchers

Forks

Sponsor this project

Contributors