🚀 Inspiration
Modern software development moves fast, but security often gets ignored. Developers focus on building features, while vulnerabilities like SQL injection or exposed secrets remain unnoticed. Fixing these issues manually is time-consuming and often delayed. We wanted to create a system that makes security automatic, intelligent, and integrated into the development workflow—so developers don’t have to think twice about it.
⚙️ What it does
EcoSecure DevAI is an AI-powered DevSecOps platform that scans code repositories, detects vulnerabilities, and suggests fixes in real time. It simulates a complete security pipeline—analyzing code, identifying risks, and generating solutions. The platform also provides a dashboard to monitor logs, vulnerabilities, and system activity, making security visible and actionable.
🛠️ How we built it
We built the backend using Node.js and Express, integrating AI (Gemini API) for vulnerability detection and fix suggestions. The frontend is a modern web interface with a dashboard, scan system, and visualization of results. The backend is deployed on Render, while the frontend is hosted on Netlify for easy access and scalability.
⚠️ Challenges we ran into
One major challenge was handling API integration and ensuring the system works even without real GitLab data. We also faced issues with async handling, frontend-backend communication, and deployment errors. Another challenge was designing a UI that feels like a real product rather than a basic project.
🏆 Accomplishments that we're proud of
We successfully built a fully working AI-powered security system with a live dashboard and scan workflow. The platform runs end-to-end—from scan trigger to vulnerability detection—on a deployed environment. We also created a clean and structured UI that demonstrates a real DevSecOps experience.
📚 What we learned
We learned how to integrate AI into real-world workflows, handle asynchronous systems, and deploy full-stack applications. We also improved our understanding of DevSecOps concepts, API handling, and building user-focused interfaces.
🔮 What's next for EcoSecure DevAI
We plan to integrate real GitLab and GitHub APIs, automate merge request creation, and enhance AI accuracy. We also want to add CI/CD integration, advanced analytics, and real-time notifications. Our goal is to turn EcoSecure DevAI into a fully automated security layer for modern development pipelines.
Built With
- api
- apis
- css
- express.js
- gemini
- git
- html
- javascript
- netlify
- node.js
- render
- rest
- vanilla
Log in or sign up for Devpost to join the conversation.