// case study — 05/05
SecureScout
Enterprise static security scanner for banking systems
overview
Production-grade security platform built for PSB Hackathon 2026 (UCO Bank × IIT Kharagpur). Detects vulnerable dependencies, hardcoded secrets, weak cryptography, injection flaws, and insecure configurations in Python projects. Ships a full Next.js dashboard with 5-tier RBAC, immutable audit logging, and a CI/CD gate that exits non-zero on Critical findings.
metrics
- PSB 2026
- UCO Bank × IIT KGP
- 5
- detector types
- 5-tier
- RBAC system
architecture
- 01Python engine — CVE, secret, crypto, injection, config detectors
- 02Express REST API — JWT auth, Zod validation, rate limiting
- 035-tier RBAC — Viewer → Super Admin per-route guards
- 04Next.js dashboard — scan management, findings, audit trail
- 05CI/CD gate — --fail-on-critical exit code for pipeline blocking
stack
- Python
- TypeScript
- Next.js
- Express
- PostgreSQL
- Redis
links
next project
CivicShield