DevHub is a comprehensive API testing and security analysis platform designed to help developers test, monitor, and secure their APIs with industrial-grade precision. It bridges the gap between functional testing (Postman) and automated security auditing (OWASP scanning).
"Built an API security testing platform with automated vulnerability scanning, SSL/TLS validation, security header analysis, and real-time endpoint monitoring. Optimized for high-accuracy detection of OWASP Top 10 vulnerabilities across 200+ endpoints."
- Automated Security Auditing: Implements deep-scan logic for 15+ security vulnerabilities including SQL Injection, XSS, SSRF, and sensitive data exposure.
- Real-Time Uptime Monitoring: Engineered a high-performance monitoring engine using
node-cronandSocket.ioto provide 24/7 endpoint tracking with millisecond-accuracy latency reporting. - Compliance-Ready Reporting: Automated the generation of cryptographic-grade security audit reports in PDF and JSON formats, designed for compliance stakeholders.
- Secure-by-Design Architecture: Leveraged Supabase Row Level Security (RLS), Bcrypt hashing, and strict input sanitization to ensure a zero-trust environment for user data.
- Advanced API Request Builder — A full-featured HTTP client supporting all methods, custom headers, environment variables, and body types for complex API interaction.
- OWASP Security Scanner — Automated endpoint analysis detecting high-risk misconfigurations and vulnerabilities with 94%+ detection accuracy.
- 24/7 Monitoring Dashboard — Real-time uptime tracking and response time visualizations powered by WebSockets.
- Security Audit Reports — Comprehensive exports documenting vulnerabilities, severity ratings, and actionable remediation steps.
- Team-Centric Workspaces — Organize, save, and share API collections and environments across development teams.
| Dashboard | Request Builder |
|---|---|
 |
 |
| Security Report | Monitoring |
|---|---|
 |
 |
- React 19 + Vite: Next-generation SPA framework for ultra-fast HMR and performance.
- Tailwind CSS v4: Modern utility-first styling for a sleek, responsive UI.
- Zustand: Lightweight, persistent global state management.
- Socket.io Client: Real-time subscriptions for instant server health alerts.
- Recharts: Dynamic data visualization for API performance metrics.
- Node.js + Express: Scalable REST API architecture.
- Supabase (PostgreSQL): Managed database with advanced RLS security policies.
- Node-Cron: Reliable background task scheduling for monitoring jobs.
- Helmet + Bcrypt + JWT: Hardened security layer for authentication and data protection.
- Express-Validator: Multi-layer input sanitization for preventing injection attacks.
DevHub follows industry-best practices for platform security:
- SSRF Hardening: All outgoing scanner requests are proxied and validated to prevent internal network reconnaissance.
- Zero-Trust RLS: Database policies prevent cross-tenant data access at the engine level.
- Automated Sanitization: 100% of API inputs are sanitized before reaching controllers.
- Encrypted Transmission: Enforced HSTS and CSP headers ensure secure communication.
- Node.js v18+
- A Supabase project
git clone https://github.com/AlexJawhari/DevHub.gitcd DevHubcd server && npm install && cd ../client && npm install- Configure
.envusing.env.exampletemplates. - Apply SQL schema from
/databaseto Supabase. npm run devin both directories.
MIT