complygaurd

• 

  main dashboard where all the data comrs togethor

Inspiration Firewall security tools like Tufin and FireMon cost $50,000–$100,000 a year and are only accessible to large enterprises. Smaller companies and security teams are left manually reading through thousands of firewall rules with no structured way to find what's risky, what's misconfigured, or where they're exposed. I wanted to build something that did what those tools do but was actually accessible. What it does Fortress Lens ingests firewall, router, and switch configuration files from vendors like Palo Alto, Cisco ASA, FortiGate, and more. It automatically parses the configs, builds a network topology model, analyzes every firewall rule for risk, detects shadowed, unused, duplicate, and overly permissive rules, maps attack paths across network zones, scores compliance against PCI DSS, NIST 800-53, HIPAA, and SOX, grades device hardening posture, and generates exportable reports in PDF, JSON, and HTML for both technical teams and executives. How we built it The backend is built with FastAPI and handles file uploads, background processing, and all analysis endpoints. The frontend is a full React single-page application with pages for dashboards, attack paths, compliance, threat intel, topology, remediation, and more. The analysis engine normalizes multi-vendor config data into a unified format and runs detection logic across rules, zones, interfaces, routes, and NAT data. Challenges we ran into Every firewall vendor has a completely different config format. Building parsers that accurately extract rules, zones, interfaces, and routing data from Palo Alto XML, Cisco ASA, and FortiGate configs without breaking on edge cases was the hardest technical problem. Modeling attack paths across multiple zones and devices also required building a graph-based traversal system from scratch. Accomplishments that we're proud of Building a fully working multi-vendor security analysis platform end to end, including a real backend, real frontend, real parsers, and real analysis logic. This is not a demo or a prototype. It is a working product that produces real security findings from real config files. What we learned How firewall rule analysis actually works at depth, how network segmentation and zone trust models are structured, how compliance frameworks like PCI DSS and NIST map to technical controls, and how to build a full-stack application that handles complex background processing at scale. What's next for Fortress Lens Adding live syslog ingestion, automated remediation suggestions with change ticket generation, support for more vendors including Check Point and Juniper, and a SaaS version that MSSPs and security teams can use without self-hosting.

Built With

• java
• python
• react
• tailwindcss
• typescript
• vite