Secure SaaS Security Monitoring Platform

Secure SaaS is a multi-tenant security monitoring platform designed to give small businesses greater visibility into suspicious activity occurring across their applications. The platform collects security events from connected applications, analyzes authentication activity, detects potential attacks such as brute-force attempts, and presents security alerts through a centralized dashboard.

Small businesses often lack the resources and infrastructure required to operate dedicated security monitoring systems. Suspicious login activity, repeated authentication failures, and potential brute-force attacks can go unnoticed when application security events are scattered across logs and individual systems.

The platform provides a centralized security layer that applications can send security events to through a project-specific API key. Events are stored and analyzed by a detection engine that identifies suspicious patterns and generates security alerts. Organizations can then monitor these alerts through a dedicated SaaS dashboard.

• User authentication and JWT-based authorization
• Multi-tenant organization structure
• Project creation and API key generation
• Security event ingestion API
• Authentication activity monitoring
• Brute-force attack detection
• Automated security alert generation
• Centralized security alerts dashboard
• Protected API routes
• Rate limiting and security middleware
• MongoDB-based event and alert storage

I am responsible for the application architecture, backend development, authentication system, security middleware, event ingestion pipeline, attack detection logic, API design, and frontend dashboard implementation.

The platform is being built with Node.js and Express on the backend, using MongoDB and Mongoose for data persistence. JWT-based authentication protects organization and project management endpoints, while API keys allow connected applications to submit security events. A detection service analyzes incoming authentication events and identifies brute-force behavior based on configurable thresholds. The frontend is being developed with React and Tailwind CSS and communicates with the backend through a REST API.

• Designing a secure multi-tenant architecture
• Separating organization data between customers
• Designing a secure authentication and authorization flow
• Building an API for external applications to submit security events
• Detecting suspicious activity without generating excessive false positives
• Designing security alerts that are useful and actionable
• Connecting the security engine to a simple and understandable SaaS dashboard

The project is currently in development and is being built as a commercially oriented security SaaS MVP. The initial version focuses on authentication monitoring, brute-force detection, security alerts, and centralized visibility, with the architecture designed to support additional detection rules and security monitoring capabilities in the future.