How mhdsahil1/xerova works
XEROVA is a cybersecurity investigation platform: analysts submit indicators, receive normalized threat findings, and can review activity on the operations dashboard or retain it in reports. Separate capabilities cover URL and QR phishing defense, vulnerability intelligence, live threat feeds, AI-assisted triage, account verification, and the Browser Guard extension. The sampled routes establish several API-to-service and persistence links; README claims support the broader capabilities, but unsampled implementation wiring is not inferred.
Main entry points: db.ts MongoDB · register/route.ts Registration · lookup/route.ts Indicator lookup · stats/route.ts Dashboard metrics
Components 34
Access and accounts
- Registration
src/app/api/register/route.ts - Email verification
src/app/api/verify-email/route.ts - Authentication
src/lib/auth.ts - User accounts
src/models/User.ts
Threat investigation
- Indicator lookup
src/app/api/threats/lookup/route.ts - Threat intelligence
src/lib/threat-apis.ts - Investigation history
src/models/ThreatSearch.ts - URL analysis API
src/app/api/threats/url-analysis/route.ts - URL inspection
src/lib/url-analysis-service.ts - QR threat scan
src/app/api/threats/qr-scan/route.ts - CVE search
src/app/api/vulnerabilities/route.ts - NVD integration
src/lib/nvd.ts - Threat data engines
src/lib/threat-apis.ts
Operations intelligence
- Dashboard metrics
src/app/api/dashboard/stats/route.ts - Cyber news feed
src/app/api/dashboard/news/route.ts - News aggregation
src/lib/news-api.ts - Threat pulse feed
src/app/api/dashboard/pulses/route.ts - Pulse intelligence
src/lib/pulsedive.ts
AI and reporting
- Assistant chat
src/app/api/assistant/chat/route.ts - AI assistant
src/lib/ai-assistant.ts - AI providers
src/lib/gemini.ts - Conversations
src/models/Conversation.ts - Report management
src/app/api/reports/route.ts - Report operations
src/app/api/reports/[id]/route.ts - Report export
src/app/api/reports/[id]/export/route.ts - Investigation reports
src/models/Report.ts
Browser Guard
- Browser Guard
extension/src/popup/popup.ts - Extension URL API
src/app/api/extension/url-analysis/route.ts
Other components
- Security analyst
- Web console
src/app/(dashboard)/dashboard/page.tsx - MongoDB
src/lib/db.ts - NIST NVD
- Threat and news services
- Gmail delivery
Connections 47
- Security analyst → Web console: uses
- Security analyst → Registration: registers
- Registration → User accounts: creates account
- Registration → Gmail delivery: sends verification
- Security analyst → Email verification: verifies email
- Email verification → User accounts: updates account
- Security analyst → Indicator lookup: submits indicator
- Indicator lookup → Threat intelligence: dispatches lookup
- Indicator lookup → Investigation history: records finding
- Threat intelligence → Threat data engines: queries engines
- Security analyst → URL analysis API: submits URL
- URL analysis API → URL inspection: analyzes URL
- Security analyst → QR threat scan: scans QR
- QR threat scan → URL inspection: analyzes destination
- QR threat scan → Investigation history: records finding
- Security analyst → CVE search: searches CVEs
- CVE search → NVD integration: queries CVEs
- NVD integration → NIST NVD: fetches vulnerability data
- Web console → Dashboard metrics: requests metrics
- Dashboard metrics → Investigation history: aggregates investigations
- Dashboard metrics → Investigation reports: counts reports
- Web console → Cyber news feed: requests news
- Cyber news feed → News aggregation: fetches articles
- News aggregation → Threat and news services: queries news service
- Web console → Threat pulse feed: requests pulses
- Threat pulse feed → Pulse intelligence: fetches pulses
- Pulse intelligence → Threat and news services: queries threat feed
- Security analyst → Assistant chat: asks question
- Assistant chat → AI assistant: generates reply
- Assistant chat → Conversations: stores conversation
- AI assistant → AI providers: requests inference
- AI providers → Threat and news services: uses AI services
- Security analyst → Report management: creates reports
- Report management → Investigation reports: creates report
- Security analyst → Report operations: manages report
- Report operations → Investigation reports: reads and updates
- Security analyst → Report export: exports report
- Report export → Investigation reports: loads report
- Browser Guard → Extension URL API: requests URL scan
- Extension URL API → URL inspection: analyzes URL
- Registration → MongoDB: connects
- Email verification → MongoDB: connects
- Indicator lookup → MongoDB: connects
- Dashboard metrics → MongoDB: connects
- Assistant chat → MongoDB: connects
- Report management → MongoDB: connects
- Report operations → MongoDB: connects