Sovereign AI Overseer: AI-Operated Zero-Trust Security

A B2B SaaS where WebAuthn passwordless security meets an autonomous Gemini AI Sentinel that bans threats and automates operations.

Comment

"In the Enterprise space, passwords are an operational liability. Sovereign AI Overseer is the cure."

💡 Inspiration: The True Cost of Passwords

In the B2B WordPress agency space, passwords aren't just a security vulnerability; they are a massive operational liability. "Forgot password" requests are the #1 support ticket, draining profit margins, while credential-stuffing botnets consume expensive server resources. I wanted to build a completely passwordless, Zero-Trust environment that doesn't just authenticate users passively, but acts as a cognitive SOC (Security Operations Center) to autonomously defend the infrastructure.

🚀 What it does: An AI-Operated B2B SaaS

We built Sovereign AI Overseer, a premium WordPress security plugin that replaces traditional passwords with native WebAuthn/FIDO2 biometrics (Face ID, Touch ID, Windows Hello).

But the plugin is only Layer 1. To achieve true AI-Native Operations for this Hackathon, DevNet Microsystems operates as a "Solo-Founder Enterprise" scaled entirely by Google's Gemini AI. We split the AI into two interconnected ecosystems:

1. The Product (Client-Side Security)

  • The Sovereign Risk Engine & Sentinel: Gemini acts as an autonomous cybersecurity analyst. Suspicious authentication payloads are queued in an asynchronous batch and sent to Gemini 3.5 Flash via our Google Cloud Run Gateway. Gemini analyzes the telemetry and returns a Threat Risk Score (0-100). Our deterministic policy engine reads the score and automatically quarantines malicious IPs for 15 minutes, blocking them at Layer 7.
  • Hash-Chain Audit Log: Every decision made by the AI is cryptographically hashed with the previous event (SHA-256), creating a verifiable, immutable security audit trail inside the database.

2. The Internal AI Ops Center (Solo-Founder Dogfooding)

To run the company with zero employees, the CEO logs into a private FIDO2-protected dashboard (eating our own dogfood). Here, a 3-Agent AI Team powers the business via Human-in-the-Loop (HITL) or fully autonomous webhooks:

  • [x] The AI Marketing Agent: Generates hyper-personalized B2B outreach for CTOs.
  • [x] The AI Sales Agent: Drafts targeted pitches to close enterprise licensing deals.
  • [x] The AI Support Agent: Autonomously resolves Tier-1 technical tickets regarding WebAuthn configurations.

⚙️ How we built it

  • The Core: PHP 8.1+ and WordPress core APIs (Zero third-party Identity Providers).
  • Biometrics: Strict WebAuthn / FIDO2 standards parsing complex CBOR data natively in PHP.
  • The AI Brain: Direct REST API integration with Gemini 3.7 Flash for high-speed, strict JSON-mode threat analysis and NLP generation.
  • Google Cloud Architecture: We deployed a serverless Python/Docker Gateway on Google Cloud Run to handle secure, authenticated AI traffic routing from WordPress to Gemini.
  • Web3 Threat Intel (Circle Prize Bonus): An autonomous Node.js microservice that automatically pays a 0.005 USDC bounty (via Circle Developer-Controlled Wallets SDK) to server nodes that successfully detect high-level botnets.

💰 Business Viability & Real Revenue

This is not a theoretical or academic hack. Sovereign AI Overseer is a live, production-ready B2B SaaS competing in the Small Business Services category. The AI doesn't just exist as a chatbot; it actively secures the infrastructure, writes the marketing, supports the clients, and drives the bottom line.

License Tier $159 / year 1 live WordPress site $799 / year Up to 5 live sites (Best for small agencies) $1,109 / year Unlimited client sites (White-label ready)

Built With

Share this project:

Updates