Zero-Trust Engine (Behavioral Security Middleware)

An advanced Express.js middleware implementing Behavioral Zero-Trust Architecture. Instead of relying on static IP blocks, this engine evaluates a dynamic trust score (0-100) for every user session based on request velocity, heuristics, and deep AI reasoning via Sarvam AI.

Architecture: The Three-Layer Defense

Layer 1: Heuristic Analysis: Instant evaluation of request frequency, failed authentication attempts, and user-agent consistency. Layer 2: AI Reasoning Layer: Traffic in the "Grey Area" (Score 40-89) is analyzed by a 105B Reasoning LLM (Sarvam AI). Layer 3: Enforcement & Override: Confirmation or rescue of confirmed threats.

Key Features

• Dynamic Trust Scoring: Real-time behavioral scoring.
• Micro-Velocity Tracking: Identifies automated scripts.
• Bot/Scraper Detection: Native signatures for common scraper libraries.
• Geo-Jump Protection: Alerts on impossible travel.
• Event-Driven Alerts: Real-time hooks for SOC integration.

Installation

npm install @shaswat2031/zero-trust-engine

Basic Quick-Start

Protecting your routes:

import { trustMiddleware, setConfig } from '@shaswat2031/zero-trust-engine';

setConfig({
  sarvamApiKey: 'your_api_key_here',
  logging: true
});

app.post('/api/auth/login', trustMiddleware, (req, res) => {
  res.send('Done.');
});