Enterprise-grade Cybersecurity Command Center built for Security Analysts, SOC Teams, Researchers, and Security Enthusiasts.
Traditional SOC platforms are often cloud-dependent, expensive, and difficult to deploy in isolated environments.
ZENTRIX delivers a powerful Local-First Security Operations Center that provides real-time telemetry, threat monitoring, malware analysis, phishing detection, honeypot monitoring, automated reporting, and alerting from a single unified platform.
- Real-time CPU Monitoring
- Memory Utilization Tracking
- Disk Health Monitoring
- Network Throughput Analytics
- Process Visibility
- System Uptime Metrics
- Live WebSocket Telemetry
- Live System Log Ingestion
- Authentication Log Monitoring
- Security Event Correlation
- Event Timeline Visualization
- Alert Generation Engine
- Real-Time Log Streaming
- Linux Syslog
- Authentication Logs
- Custom Security Events
- Simulated Events (Fallback Mode)
Monitor endpoint activities in real-time.
- Running Process Monitoring
- Suspicious Process Detection
- Network Connection Tracking
- File Activity Monitoring
- Threat Indicator Detection
- Netcat
- Mimikatz
- XMRig
- Unauthorized Processes
Gain visibility into network activity.
- Protocol Statistics
- Bandwidth Analytics
- Source/Destination Tracking
- Packet Monitoring
- Suricata Integration Support
Capture and analyze unauthorized activities.
- Port Scan Detection
- Unauthorized Connection Logging
- Attack Visualization
- Lightweight Built-in Honeypot
- Cowrie Integration Support
- OpenCanary Integration Support
Upload and analyze suspicious files.
- MD5 Hash Generation
- SHA1 Hash Generation
- SHA256 Hash Generation
- Entropy Analysis
- Metadata Extraction
- String Extraction
- VirusTotal Lookups
- YARA Rule Matching
- Sigma Rule Matching
Maximum Upload Size: 500 MB
Analyze suspicious emails and headers.
- EML Parsing
- Email Header Analysis
- SPF Validation
- DKIM Validation
- DMARC Validation
- URL Reputation Analysis
- Credential Harvesting Detection
- Confidence Scoring
Generate professional reports automatically.
- CSV
- JSON
- Executive Reports
- Security Reports
- Audit Reports
Receive alerts directly through:
- Scheduled Reports
- Incident Notifications
- Delivery Logging
- Retry Mechanism
- Alert History
- Delivery Tracking
┌─────────────────────────────────────────┐
│ ZENTRIX │
├─────────────────────────────────────────┤
│ React + TypeScript Frontend │
├─────────────────────────────────────────┤
│ Express.js API Layer │
├─────────────────────────────────────────┤
│ WebSocket Event Streaming │
├─────────────────────────────────────────┤
│ SIEM │ EDR │ IDS │ Honeypot │ Reports │
├─────────────────────────────────────────┤
│ MongoDB / JSON Fallback Storage │
├─────────────────────────────────────────┤
│ Local Operating System Telemetry │
└─────────────────────────────────────────┘
mongodb://localhost:27017/zentrixbackend/data/
If MongoDB is unavailable, ZENTRIX automatically switches to JSON-based storage.
Unlike traditional SOC platforms, ZENTRIX uses a streamlined single-user registration model.
- Full Name
- Email Address
- WhatsApp Number
- Profile Photo
✅ No Password Required
✅ No OAuth Dependency
✅ Instant Future Access
✅ Simplified User Experience
storage/
│
├── uploads/
├── reports/
├── malware/
├── phishing/
├── logs/
└── backups/
- React
- TypeScript
- Redux Toolkit
- React Router
- Socket.IO Client
- Node.js
- Express.js
- Socket.IO
- System Information
- MongoDB
- JSON File Storage
- YARA
- Sigma Rules
- VirusTotal API
- SPF Validation
- DKIM Validation
- DMARC Validation
- PDFKit
- Node Cron
- Twilio WhatsApp API
- WhatsApp Business Cloud API
- SMTP Email
Telemetry updates every:
2 Seconds
- CPU Usage
- RAM Usage
- Disk Utilization
- Network Throughput
- Active Connections
- Process Count
- System Uptime
- Local-First Architecture
- Privacy-Focused Design
- Offline Capability
- Least Privilege Approach
- Secure Report Generation
- Comprehensive Audit Logging
- Architecture Planning
- ZENTRIX Rebranding
- Authentication Redesign
- Real-Time Telemetry
- SIEM Integration
- EDR Monitoring
- IDS Monitoring
- Malware Analysis Engine
- Phishing Detection Engine
- Honeypot Monitoring
- Automated Reporting
- WhatsApp Integration
- Email Alerting
- Stable Release
- Documentation
- Installer Packaging
- SOC Analysts
- Security Engineers
- Blue Team Operators
- Incident Responders
- Security Researchers
- Cybersecurity Students
- Enterprise Security Teams
Coming Soon...
Contributions, feature suggestions, and security improvements are welcome.
- Fork the repository
- Create a feature branch
- Commit your changes
- Open a Pull Request
MIT License
ZENTRIX is designed to bring enterprise-grade visibility, monitoring, detection, and response capabilities directly to local environments while maintaining simplicity, performance, and operational control.