Inspiration
Traditional cybersecurity governance is broken. It relies on static checklists that are outdated the moment they are saved. I built ResilAI to solve the "Translation Problem" between complex technical data and executive decision-making, moving the industry toward "Evidence-Based" readiness.
What it does
ResilAI is a Continuous Readiness platform that automates cybersecurity governance. It features a deterministic scoring engine that eliminates AI hallucinations while using Gemini to provide human-readable executive insights. It maps findings directly to NIST CSF 2.0 and calculates a Governance Health Index (GHI) based on telemetry, detection, identity, IR, and resilience.
How I built it
The platform is built with a Separation of Concerns model. The backend uses FastAPI (Python 3.11+) deployed on Google Cloud Run. The frontend is a modular React (TypeScript/Vite) app. I utilized Firestore for metadata and implemented a Zero-Knowledge architecture using AES-256-GCM encryption at the field level to ensure user privacy.
Challenges I ran into
Ensuring the integrity of governance logic was the biggest hurdle. I solved this by building the Internal Governance Validation Framework (IGVF), a 79-test suite that prevents logic drift. I also conducted a rigorous security audit to harden the platform against SSRF and IDOR vulnerabilities.
Accomplishments that I'm proud of
- Implementing a Deterministic Governance Engine that produces mathematical, auditable risk scores.
- Building a Regulatory Forecasting system to predict gaps against future laws like the EU AI Act.
- Achieving a production-ready status with 455+ passing tests.
What I learned
Integrating AI like Gemini into high-stakes GRC requires a deterministic core. I learned how to leverage AI for narratives while keeping the risk math grounded in immutable facts.
What's next for ResilAI
Expanding into live Splunk telemetry for automated evidence collection and enhancing our Zero-Knowledge architecture with the Web Crypto API for client-side encryption keys.
Log in or sign up for Devpost to join the conversation.