Inspiration

Traditional cybersecurity governance is broken. It relies on static checklists that are outdated the moment they are saved. I built ResilAI to solve the "Translation Problem" between complex technical data and executive decision-making, moving the industry toward "Evidence-Based" readiness.

What it does

ResilAI is a Continuous Readiness platform that automates cybersecurity governance. It features a deterministic scoring engine that eliminates AI hallucinations while using Gemini to provide human-readable executive insights. It maps findings directly to NIST CSF 2.0 and calculates a Governance Health Index (GHI) based on telemetry, detection, identity, IR, and resilience.

How I built it

The platform is built with a Separation of Concerns model. The backend uses FastAPI (Python 3.11+) deployed on Google Cloud Run. The frontend is a modular React (TypeScript/Vite) app. I utilized Firestore for metadata and implemented a Zero-Knowledge architecture using AES-256-GCM encryption at the field level to ensure user privacy.

Challenges I ran into

Ensuring the integrity of governance logic was the biggest hurdle. I solved this by building the Internal Governance Validation Framework (IGVF), a 79-test suite that prevents logic drift. I also conducted a rigorous security audit to harden the platform against SSRF and IDOR vulnerabilities.

Accomplishments that I'm proud of

  • Implementing a Deterministic Governance Engine that produces mathematical, auditable risk scores.
  • Building a Regulatory Forecasting system to predict gaps against future laws like the EU AI Act.
  • Achieving a production-ready status with 455+ passing tests.

What I learned

Integrating AI like Gemini into high-stakes GRC requires a deterministic core. I learned how to leverage AI for narratives while keeping the risk math grounded in immutable facts.

What's next for ResilAI

Expanding into live Splunk telemetry for automated evidence collection and enhancing our Zero-Knowledge architecture with the Web Crypto API for client-side encryption keys.

Built With

Share this project:

Updates

posted an update —

Just recorded the demo video at the Google Build with AI tour! We showed off the live multimodal agent, our Cloud Run deployment, and the encrypted Firestore vault.

Huge thanks to the team for the late-night sprints. We’re ready for the judges. Let's redefine how the world measures incident readiness. #GeminiLiveAgentChallenge

Log in or sign up for Devpost to join the conversation.

posted an update —

Excited to share that I’ve started working on ResilAI, an AI-assisted cyber resilience and governance platform built using Google Cloud and Gemini.

The goal is to bridge the gap between technical cybersecurity findings and executive decision-making. ResilAI runs deterministic governance checks mapped to NIST CSF 2.0 and then uses Gemini to generate executive-level cyber risk narratives and remediation insights.

Currently building the platform with React, FastAPI, Cloud Run, Firestore, and Google Gemini Flash as part of the #GeminiLiveAgentChallenge.

Looking forward to sharing progress updates as the architecture, governance engine, and AI narrative layers evolve.

Log in or sign up for Devpost to join the conversation.

Submission history