⚔️ jebat-security

Enterprise Security CLI — Four-layer penetration testing, vulnerability scanning, compliance auditing, and system hardening. Powered by Hulubalang, Pengawal, Perisai, and Serangan.

🚀 Quick Start

# Install globally
npm install -g jebat-security

# Or run directly with npx
npx jebat-security --help

# Initialize security workspace
npx jebat-security init

# Run security audit
npx jebat-security audit https://example.com

# Run vulnerability scan
npx jebat-security scan https://example.com

# Run penetration test
npx jebat-security pentest https://example.com

🛡️ Four-Layer Security Suite

JEBAT Security provides comprehensive protection through four specialized agents:

| Layer | Agent | Role | Commands | |-------|-------|------|----------| | 🔍 Audit | Hulubalang | Security audit & compliance | npx jebat-security audit | | 🛡️ Defense | Pengawal | CyberSec defense & scanning | npx jebat-security scan | | 🔒 Hardening | Perisai | System hardening & compliance | npx jebat-security harden | | ⚔️ Pentest | Serangan | Penetration testing & red team | npx jebat-security pentest |

📋 CLI Commands

Setup & Management

# Initialize security workspace
npx jebat-security init

# Check security system status
npx jebat-security status

# Generate security report
npx jebat-security report [session-id]

# Show help
npx jebat-security --help

Security Operations

# Run Hulubalang security audit
npx jebat-security audit https://target.com

# Run Pengawal vulnerability scan
npx jebat-security scan https://target.com

# Run Perisai system hardening
npx jebat-security harden https://target.com

# Run Serangan penetration test
npx jebat-security pentest https://target.com

🏗️ Architecture

┌─────────────────────────────────────────────────────────────┐
│                  JEBAT Security Suite                       │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│  ┌───────────┐  ┌───────────┐  ┌───────────┐  ┌──────────┐ │
│  │Hulubalang │  │ Pengawal  │  │  Perisai  │  │ Serangan │ │
│  │  (Audit)  │  │ (Defense) │  │(Hardening)│  │ (Pentest)│ │
│  │           │  │           │  │           │  │          │ │
│  │• Compliance│ │• Scanning │ │• Patching │ │• Red Team│ │
│  │• Reporting │ │• Detection│ │• Config    │ │• Exploit │ │
│  │• Assessment│ │• Response │ │• Lockdown  │ │• Testing │ │
│  └───────────┘  └───────────┘  └───────────┘  └──────────┘ │
│         │              │              │             │       │
│         ▼              ▼              ▼             ▼       │
│  ┌─────────────────────────────────────────────────────┐   │
│  │              Security API                           │   │
│  │         /api/v1/security/*                          │   │
│  │  Targets · Sessions · Runs · Findings · Reports     │   │
│  └─────────────────────────────────────────────────────┘   │
│                                                             │
└─────────────────────────────────────────────────────────────┘

📊 Security Features

🔍 Hulubalang (Audit & Compliance)

• Automated security assessments
• Compliance reporting (SOC2, ISO 27001, GDPR)
• Risk analysis and scoring
• Executive summary generation
• Session tracking with SQLite persistence

🛡️ Pengawal (CyberSec Defense)

• Vulnerability scanning and detection
• Real-time threat monitoring
• Automated incident response
• Network service discovery
• Technology stack fingerprinting

🔒 Perisai (System Hardening)

• Configuration audit and remediation
• Security baseline enforcement
• Access control verification
• Patch management tracking
• System lockdown procedures

⚔️ Serangan (Penetration Testing)

• Automated penetration testing
• Exploit simulation and validation
• Attack surface mapping
• Red team operations
• Findings correlation and analysis

🔧 Integration

With JEBAT Platform

# Install JEBAT Core for full platform
npx jebat-core install

# Security is included with JEBAT Agent
npx jebat-agent --full

# Access security dashboard
# Visit: https://jebat.online/security

With Security API

# Create target
curl -X POST http://localhost:8080/api/v1/security/targets \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com"}'

# Start session
curl -X POST http://localhost:8080/api/v1/security/sessions \
  -H "Content-Type: application/json" \
  -d '{"target_id": "target-id", "model": "ollama/hermes3"}'

# View findings
curl http://localhost:8080/api/v1/security/findings?session_id=session-id

📁 Directory Structure

After running npx jebat-security init:

~/.jebat/security/
├── workspace/
│   ├── targets.json          # Target definitions
│   ├── sessions/             # Active sessions
│   ├── findings/             # Vulnerability findings
│   └── reports/              # Generated reports
├── config.json               # Security configuration
└── .env                      # API keys and settings

🌐 Live Demos

| Page | URL | Description | |------|-----|-------------| | Security Dashboard | jebat.online/security | Real-time security monitoring | | Landing Page | jebat.online | Main platform overview | | Enterprise Portal | jebat.online/portal | Customer portal with metrics |

📚 Documentation

• Security API - Full API reference
• JEBAT Core - Platform backbone
• JEBAT Agent - Setup wizard

🤝 Contributing

1. Fork the repository
2. Create your feature branch (git checkout -b feature/security-feature)
3. Commit your changes (`git commit -m 'feat: add security feature

Co-authored-by: Qwen-Coder [email protected]') 4. Push to the branch (git push origin feature/security-feature`) 5. Open a Pull Request

📄 License

This project is licensed under the MIT License — see the LICENSE file for details.