← Back to Unified Portfolio
Open SourceLive

SentinelScan

Automated AI-powered attack surface reconnaissance and vulnerability reporting platform.

View on GitHub Repository
Next.js 14TypeScriptFastAPIPython (AsyncIO / aiohttp)Supabase (PostgreSQL)OpenRouter AITailwind CSS
sentinel-scan.sh
CLI Telemetry
$ curl -N -X POST https://api.sentinelscan.io/v1/scan \
  -H "Content-Type: application/json" \
  -d '{"domain": "target-organization.com"}'

[EVENT: recon_start] Firing 120 async DNS & CT log probes...
[EVENT: port_scan] Open ports detected: 22 (SSH), 80 (HTTP), 443 (HTTPS), 3306 (MySQL)
[EVENT: fuzzing] Warning: 2 exposed endpoints found (/.git/config, /backup.sql)
[STREAM: ai_report] "EXECUTIVE SUMMARY: Target demonstrates critical perimeter exposure..."
[EVENT: complete] Report saved to Supabase · Access Key: sec_rep_8941a
Architecture & Objective

Engineered with uncompromising integrity.

SentinelScan bridges offensive cybersecurity reconnaissance with modern web architecture. Built with an asynchronous Python/FastAPI backend and Next.js 14 frontend, it replaces slow manual reconnaissance with hundreds of non-blocking networking checks (DNS enumeration, TCP port testing, endpoint fuzzing) and streams AI-synthesized risk analysis via Server-Sent Events directly to the analyst.

System Specifications

  • Concurrent async port and endpoint fuzzing running in under 20 seconds
  • Streaming Server-Sent Events (SSE) for zero-latency LLM report delivery
  • OWASP Top 10 & CWE classification directly linked to findings
  • Serverless-compatible architecture bridging Next.js and FastAPI

Core Capabilities

Concurrent Async Reconnaissance Engine

Custom Python scanner utilizing asyncio and aiohttp to run hundreds of simultaneous DNS queries, non-blocking TCP port checks, and 60+ sensitive endpoint fuzzing probes.

Streaming AI Synthesis Pipeline

Real-time Server-Sent Events (SSE) streaming contextualized security summaries mapped to the OWASP Top 10 directly to the frontend.

Executive-Ready Risk Reporting

Automatically categorizes discovered attack vectors, calculating severity scores, exposed ports, and remediation recommendations in dynamic Markdown.

Persistent Report Links

Persists raw telemetry and final AI audits in Supabase PostgreSQL, enabling instant shareable security reports without re-running scans.