9583846ed5
docs: align section 8.1 and 8.2 with verified constellation and secret resolution
2026-09-20 20:12:39 +03:00
be63b16a2f
docs: Correct Section 4.1 flowchart to eliminate false backend ingress
...
- Clarified that attacker traffic cannot reach private backend directly
- Corrected vuln scanner direction to show outbound checks
- Added in-memory simulation engine visualization
2026-09-20 20:06:38 +03:00
6e7729d118
docs: Synchronize entire documentation with live private WireGuard mesh
...
- Updated README overview table, architecture diagram & deploy steps
- Updated REPORT.md Executive Summary, score (9.3/10), features table & Challenge 4
- Updated architecture & sequence diagrams across all reports to reflect private mesh routing
2026-09-20 20:02:34 +03:00
ec383991ca
feat: Switch inter-service routing to private WireGuard mesh
...
- soc-gateway now routes directly to soc-backend via http://10.100.0.94:4000
- deploy.js dynamically queries backend internal WireGuard IP via exec_in_app
- zero traffic travels over the public internet between microservices
2026-09-20 19:59:35 +03:00
19f5ac9aae
docs: Add deep dive on WireGuard mesh & OPA Network Policy
...
- Discovered in-kernel WireGuard overlay mesh (10.100.0.0/24) via wg0 interface
- Discovered true REST API endpoint for Network Policy (/policy/network) with OPA compilation
- Added Mermaid architecture and sequence diagrams for Zero-Trust ingress & mesh routing
- Upgraded Network Policy rating to 9.5/10 and overall score to 9.3/10
2026-09-20 19:39:05 +03:00
547af59fcd
feat: add GitHub API test script and ignore social_posts.md
2026-09-14 21:55:23 +03:00
d39964ae24
docs: Replace ASCII architecture diagram with Mermaid flowchart
...
- Renders as interactive SVG on GitHub
- Shows all 3 layers + live scan targets
- Fixed clone URL to actual repo
2026-09-14 21:37:04 +03:00
bb3e8e073a
docs: update README.md
2026-09-14 21:19:00 +03:00
fe15de879d
docs: Update Network Policy findings - OPA/Rego UI editor, not API accessible
...
- Network Policy exists as Rego editor in console UI
- cumin.dev/network-policy returns 405 (endpoint exists) not 404
- Not accessible via MCP or bearer token - UI only feature
- Rating updated: 2/10 -> 7/10
2026-09-14 21:11:27 +03:00
c5176399ce
feat: Verified all advanced features + corrected ratings
...
- Secrets: WORKING (value must be base64) - 9/10
- Constellations: WORKING (apps: soc-gateway + soc-backend added) - 9.5/10
- Pull Secrets: WORKING (validates live credentials) - 8/10
- Overall score revised: 7.8 -> 9.0/10
- Created 3 project secrets, 1 active constellation (soc-private-net)
2026-09-14 21:02:45 +03:00
e29d5703c1
docs: Professional README + cleanup old files
...
- Rewrote README with badges, architecture diagram, quick start, MCP guide
- Deleted: cumin_evaluation_report_en.md, soc_system_report.md, walkthrough.md
2026-09-14 20:54:55 +03:00
d8ac07cb6f
docs: Add comprehensive platform evaluation report
...
Complete A-Z guide, Mermaid diagrams, feature ratings, live results
2026-09-14 20:50:31 +03:00
3566d9c86a
SOC Command Center - Cumin Cloud Platform Case Study
...
9-service SOC platform deployed on Cumin via MCP
Features: SIEM, SOAR, Honeypot, IDS/IPS, Firewall, UBA, Threat Intel, Vuln Scanner (real targets), Incident Management
Architecture: 2-app consolidated deployment (backend + gateway)
2026-09-14 20:16:47 +03:00
