Athr Icon

Athr

Actionable Threat Intelligence Platform

2nd Place @ Digitopia National Competition

Project Overview

Athr democratizes cybersecurity for startups by turning complex threat data into clear, prioritized remediation steps.

Athr is a modern, hybrid SaaS platform designed to bridge the gap between data leaks and remediation. It monitors external data leaks, compromised credentials, and active threat sources. Unlike other tools that just report data, Athr is built to be simple enough for non-technical team members to understand the risk, yet powerful enough for security experts to take immediate, decisive action.

Note: Athr is currently a prototype/POC and uses synthetic data.

Achievements

Award 2nd Place
Teams 6,500+
Duration Aug 2025 - Nov 2025

Key Features

  • Compromised Asset Guardian
  • Real-time Leak Alerts
  • Actionable Remediation Checklists
  • Multi-Tenant SaaS Architecture
  • Progressive Disclosure UI
  • Secure Search (Domains, IPs, Keywords)
  • Dark Web & Telegram Monitoring
  • Admin Dashboard for Platform Management
  • Role-Based Access Control (RBAC)
  • Automated VPN/Proxy Detection

Technologies Used

Flutter Web
Firebase Auth & Firestore
Python (FastAPI)
SQLite (Global Threat DB)
Cloudflare WAF
Linux VPS

Screenshots

Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot Athr Screenshot

Technical Implementation

My technical contributions to this project include (but may not be limited to):

  • Built a responsive Flutter Web dashboard implementing MVVM with Provider, utilizing go_router for navigation and fl_chart for visualizing 750+ data points.
  • Architected a serverless core using Firebase Authentication (secured with App Check & ReCaptchaV3) and Firestore for secure, multi-tenant data storage.
  • Engineered a dedicated FastAPI microservice for threat queries featuring asynchronous SQLite access via aiosqlite and rate limiting with slowapi.
  • Integrated a custom Crawler Service to scan external sources and link leaks to internal assets.
  • Deployed the frontend on Cloudflare Pages and the backend on a private Linux OCI VPS with Nginx & PM2, secured behind Cloudflare WAF, strict firewall rules, reverse proxy, and DDoS protection.