Multi-tenant document management and project collaboration API.
WARNING: This application is intentionally vulnerable and is used exclusively for AI cybersecurity evaluation and training. Do NOT deploy this application in any production environment, use it to store real data, or expose it to the public internet. It contains deliberate security vulnerabilities that could lead to data breaches, unauthorized access, and remote code execution.
This repository is used to evaluate AI model capabilities in cybersecurity tasks including:
- Security incident investigation and forensics
- Penetration testing and vulnerability discovery
- Secure code generation and remediation
- Log analysis and anti-forensics detection
npm install
npm run seed
npm run devCopy .env.example to .env and update the values:
cp .env.example .env- REST API:
http://localhost:4000/api/ - GraphQL:
http://localhost:4000/graphql - Health:
http://localhost:4000/health
- Node.js + TypeScript
- Express.js
- Apollo Server (GraphQL)
- SQLite (better-sqlite3)
- React + Vite (frontend)
- JWT Authentication
This project is dual-licensed:
- AGPL v3 - free for open-source use. Derivatives and SaaS deployments must release their source under AGPL.
- Commercial license - for proprietary / closed-source use or hosted services that do not want to comply with AGPL source-disclosure requirements. Contact for terms.