Skip to content

README.md

Latest commit

 

History

History
199 lines (150 loc) · 10.7 KB

README.md

File metadata and controls

199 lines (150 loc) · 10.7 KB
Raw
CorpLens One Logo

CorpLens One

AI-Powered Corporate Intelligence Platform

Smarter Intelligence. Better Decisions.

Build Status Python FastAPI React TypeScript PostgreSQL Neo4j Docker ISO/IEC 27037

CorpLens One is a world-class, enterprise-grade SaaS platform designed for Chief Information Security Officers (CISOs), Corporate Risk Teams, M&A Advisors, Compliance Officers, and OSINT Analysts.

It unifies passive Open Source Intelligence (OSINT), Third-Party Risk Management (TPRM), NIST Vulnerability advisories, OFAC/UN Sanction screening, Neo4j Graph Topology, and RAG AI Copilot into a single authoritative workspace.

Quick Start • Architecture • Core Capabilities • API Endpoint Reference • Compliance

💡 Executive Summary

CorpLens One solves the fragmentation of corporate intelligence by aggregating non-intrusive public telemetry, SEC filings, Certificate Transparency (CT) logs, global sanction watchlists, and software vulnerability feeds into a continuous 7-pillar risk calculation engine.

Key business outcomes delivered:

  • Zero-Intrusion Passive OSINT: Conduct complete corporate reconnaissance without triggering target security alarms or violating scanning regulations.
  • Evidentiary Integrity: Maintain an audited ISO/IEC 27037 Chain of Custody (CoC) with SHA-256 payload digests for board reporting and legal due diligence.
  • Domain-Grounded RAG AI: Query corporate risk posture in natural language with direct citations from SEC 10-K filings, DNS records, and NIST advisories.

⚡ Core Capabilities

🏢 1. Target Intelligence Workspace & Passive Profiling

  • 6-Pillar Deep-Dive Workspace: Profile target organizations across Digital Footprint, Tech Stack, CVE Advisories, Public Documents, Regulatory News, and Executive Reputation.
  • Passive Ingestion Pipeline: Ingest DNS records (A, MX, TXT, NS), SSL/TLS Certificate Transparency logs, HTTP headers, and public legal attestations without active port scans.

🤖 2. RAG AI Intelligence Copilot

  • 3-Panel Forensic Interface: Chat stream with grounded citations, session history navigation, and active evidence inspector drawer.
  • Multi-LLM Provider Wrapper: Intelligent fallback routing supporting Google Gemini 1.5 Pro, OpenAI GPT-4o, and local Ollama models.
  • 7 Intent Classifiers: Auto-route queries across COMPARE, EXECUTIVE, CVE_THREAT, SANCTIONS, REPORT_GEN, SUPPLY_CHAIN, and RISK_EXPLAIN.

🕸️ 3. Neo4j Graph Topology & Entity Disambiguation

  • Visual Entity Mapping: Interactive Cytoscape.js canvas visualizing connections between Parent Holding Companies, Subsidiaries, Board Executives, Shared Web Infrastructure, and Vulnerabilities.
  • Cypher Analytics: Graph centrality metrics (Eigenvector & Betweenness) for identifying single points of failure in complex supply chains.

🛡️ 4. 7-Pillar Automated Risk Calculation Engine

Dynamically scores targets ($0.0 - 10.0$) across seven critical risk dimensions:

  1. Infrastructure Risk: Open ports, SSL/TLS cert expiration, DNS misconfigurations.
  2. Technology Stack Risk: Outdated web frameworks, unpatched software stacks.
  3. Reputation & News Risk: Adverse media sentiment, regulatory actions.
  4. Business & Executive Risk: Ownership turnover, governance anomalies.
  5. Operational Risk: Provider outage history, single-point dependencies.
  6. Supply Chain Risk: Multi-tier vendor concentration and 4th-party dependencies.
  7. Compliance & Sanctions Risk: Fuzzy match scoring against US OFAC SDN, UN, EU, and UK HMT registries.

⚖️ 5. ISO/IEC 27037 Chain of Custody & PDF Report Engine

  • ReportLab 4.5 Binary Engine: Generate multi-page executive PDF briefs featuring cryptographic SHA-256 / SHA-512 payload hashes, UTC timestamps, 7-pillar metric tables, and CISO sign-off signature blocks.
  • Multi-Format Exporting: One-click exports for PDF, HTML, JSON, and CSV formats.

📋 6. Kanban Investigation Case Management

  • Analyst Case Board: Drag-and-drop lifecycle management (Open → In Progress → Resolved).
  • Audit Trails: Complete historical log of analyst notes, evidence additions, and task completions.

🏗️ Architecture

CorpLens One follows a 3-Tier Decoupled Microservices Architecture built for high availability and strict data isolation.

graph TD
    UI["🖥️ Presentation Layer (React 19 + TypeScript + Tailwind CSS)"]
    API["⚡ Business Logic Layer (FastAPI Microservices)"]
    PG[("🐘 PostgreSQL 16 (Primary DB + RLS)")]
    NEO[("🕸️ Neo4j 5.18 (Graph Topology)")]
    REDIS[("⚡ Redis 7 (Caching & Queue)")]
    AI["🧠 RAG AI Engine (Gemini / OpenAI / Ollama)"]

    UI -->|HTTP REST / JSON| API
    API --> PG
    API --> NEO
    API --> REDIS
    API --> AI
Loading

Infrastructure Layering

┌─────────────────────────────────────────────────────────────────┐
│              CorpLens One Frontend (React 19 / Vite)            │
│  Tailwind CSS  ·  Lucide Icons  · Recharts  · Cytoscape.js     │
│  Enterprise Light Mode (#FFFFFF / #F8FAFC / #2563EB)            │
└────────────────────────────────┬────────────────────────────────┘
                                 │ HTTP REST (Port 8000)
                                 ▼
┌─────────────────────────────────────────────────────────────────┐
│               CorpLens One Backend (FastAPI Microservices)       │
│  12 Routers  ·  7-Pillar Risk Engine  · ReportLab PDF Generator │
└────────┬───────────────────────┬────────────────────────┬───────┘
         ▼                       ▼                        ▼
┌─────────────────┐     ┌─────────────────┐     ┌─────────────────┐
│  PostgreSQL 16  │     │   Neo4j 5.18    │     │     Redis 7     │
│  Primary Data   │     │  Graph Vectors  │     │  Queue / Cache  │
└─────────────────┘     └─────────────────┘     └─────────────────┘

🚀 Quick Start

Option A: Running via Docker Compose (Recommended)

  1. Clone the Repository:

    git clone https://github.com/amn2905/CorpLens-AI.git
cd CorpLens-AI

  2. Launch Docker Stack:

    docker compose up --build -d

  3. Access Services:

Option B: Local Developer Installation

Backend Setup

cd backend
python -m venv venv
venv\Scripts\activate      # Windows
# source venv/bin/activate # Linux/Mac

pip install -r requirements.txt
pytest -v                  # Run Backend Test Suite (22 Tests)
python app/main.py

Frontend Setup

cd frontend
npm install
npm run build              # Production build verification
npm run dev                # Launch Vite Dev Server

🔌 API Endpoint Reference

Category Endpoint Method Description
System /health GET System health probe (DB, Neo4j, Redis status)
Companies /api/v1/companies GET List monitored target companies
Companies /api/v1/companies/{id} GET Get 360-degree target detail profile
AI Copilot /api/v1/ai/chat POST RAG AI query endpoint with source citations
CVE Intel /api/v1/threats/cves GET List NIST NVD vulnerability advisories
Sanctions /api/v1/sanctions/screen POST Fuzzy name matching against OFAC/UN lists
Cases /api/v1/cases GET / POST Analyst investigation case management
Graph /api/v1/graph/topology GET Fetch Neo4j entity topology graph
Reports /api/v1/reports/pdf/{id} GET Download ISO 27037 PDF evidentiary report
STIX 2.1 /api/v1/export/stix GET Export threat telemetry in STIX 2.1 JSON

📜 ISO/IEC 27037 Evidentiary Chain of Custody

CorpLens One strictly adheres to ISO/IEC 27037:2012 (Guidelines for identification, collection, acquisition, and preservation of digital evidence).

Every PDF brief generated by the platform includes:

  • Acquisition Timestamp: UTC timestamped at collection.
  • SHA-256 Payload Hash: Cryptographic verification digest of raw telemetry.
  • SHA-512 Verification: High-entropy tamper checking.
  • Lawful OSINT Attestation: Certified non-intrusive collection from public registries.

🛡️ License

Copyright © 2026 CorpLens One. All rights reserved.
Distributed under the Proprietary Enterprise License. See LICENSE for full terms.