Startup Surakshate

• 

Inspiration

Startups move fast — but security often gets left behind. While building earlier projects, we realized how easy it is to unintentionally expose keys, run outdated dependencies, or deploy without essential protections. Most founders aren’t security experts — so we wanted to create a tool that protects startups from day one, without complexity or fear.

---

What it does

Startup Surakshate scans a GitHub repository or live website, detects vulnerabilities, and then uses AI to explain risks in simple language — along with step-by-step fixes. It provides:

Safe and simple user authentication (Supabase)

AI-powered vulnerability summaries

Security scanning for repos & websites

Severity-based dashboard

PDF security report generator

Demo Mode that works instantly with no setup

---

How we built it

Backend: FastAPI (Python)

Database + Auth: Supabase

Frontend: Tailwind CSS + JS

AI Summaries: GPT-4o-mini

Security Scanners: Custom analyzers + Snyk API

PDF Reports: pdfkit + wkhtmltopdf Deployed using Vercel (frontend) & Render (backend).

---

Challenges we ran into

Ensuring scan results were accurate, not noisy

Balancing AI explanations to be simple yet technically correct

Implementing secure user input validation to prevent misuse

Managing environment keys safely during deployment

Rendering PDF reports consistently across OS environments

---

Accomplishments that we're proud of

Onboarding takes less than 60 seconds

Demo Mode enables instant testing, no API key needed

Clear, friendly vulnerability explanations — not just raw technical logs

A polished dashboard that feels intuitive and professional

Showing that security can be simple, accessible, and beginner-friendly

---

What we learned

Security isn’t just about tools — it’s about communication and clarity

UX matters even more in cybersecurity platforms

Founders value actionable fixes more than technical depth

Building responsibly means designing for safety from the start

---

What's next for Startup Surakshate

Auto-generate Pull Requests to fix vulnerabilities automatically

GitHub app integration for scheduled weekly repo scans

Slack / Discord security alert notifications

Add support for scanning Dockerfiles & CI/CD pipelines

Introduce affordable Startup Security Plans for early-stage founders

Built With

• api
• css
• fastapi
• javascript
• openai
• pdfkit
• python
• render
• snyk
• supabase
• tailwind
• vercel