Cyubi is a tamper-proof event vault for IT service providers and SMBs. It captures, chains, and preserves security-relevant events with cryptographic integrity — so you can prove what happened, when, and why.
Features • What Cyubi is NOT • Quick Start • Deployment • Contributing
Cyubi is not a general-purpose log management system.
- ❌ Not a log aggregator — Cyubi doesn't ingest terabytes of raw logs. It stores only selected, relevant events.
- ❌ Not a monitoring tool — Cyubi doesn't do real-time dashboards or alerting pipelines. It focuses on forensic proof.
- ❌ Not a log pipeline — Cyubi doesn't stream or transform logs. It's an event vault with cryptographic integrity.
- ❌ Not an enterprise SIEM — Cyubi targets small and mid-sized teams, not hyperscaler environments.
Cyubi does one thing well: It takes security-relevant events, chains them cryptographically, and makes them available as tamper-proof incident documentation.
Primary audience:
- 🏢 IT Service Providers — Document incidents for clients with proof
- 🏭 SMBs (KMU) — Affordable, self-hosted incident tracking without enterprise overhead
- 🔍 Post-Incident Teams — Reconstruct what happened after a breach or outage
Not for:
- ❌ Hyperscalers needing petabyte-scale log search
- ❌ Real-time monitoring / APM dashboards
- ❌ Big Data analytics pipelines
Every event is cryptographically linked to its predecessor using SHA-256. If anyone modifies, deletes, or reorders an event, the chain breaks — and Cyubi detects it. No blockchain overhead, just math.
Select events, generate a human-readable incident report with timeline, root cause summary, and relevance assessment. Export as Markdown. Show your client or management exactly what happened.
Mirror every incoming event to an external USB drive in real-time. Even if the server is compromised, your logs survive on physical media.
Connect OpenAI, Anthropic, Gemini, Mistral, or a local LLM (Ollama). AI interprets events in real-time — but only if you enable it. No data leaves your system by default.
A fully responsive, glassmorphic interface built for operators who care about clarity and design.
Ingest from servers, gateways, IoT devices, or web apps. Cyubi acts as a central event hub.
Fire alerts based on severity levels to Slack, Discord, or any webhook endpoint.
git clone https://github.com/IDGUX/Cyubi.git
cd Cyubi
npm installdocker compose up -d postgresnpx prisma db pushnpm run devDeploy anywhere in seconds. Optimized for Docker and Proxmox.
# docker-compose.yml (included in repo)
services:
app:
build: .
ports:
- "3000:3000"
- "514:5140/udp"
environment:
- DATABASE_URL=postgresql://cyubi:cyubi@postgres:5432/cyubi
- JWT_SECRET=your_ultra_secure_secret
depends_on:
postgres:
condition: service_healthy
postgres:
image: postgres:16-alpine
volumes:
- postgres_data:/var/lib/postgresql/data
healthcheck:
test: ["CMD-SHELL", "pg_isready -U cyubi"]Cyubi uses PostgreSQL for reliable, concurrent data storage. Your data is protected through Docker volumes.
# Manual backup
docker exec cyubi-db pg_dump -U cyubi cyubi > backup_cyubi_$(date +%F).sql
# Restore
cat backup.sql | docker exec -i cyubi-db psql -U cyubi cyubiNote: PostgreSQL was chosen over SQLite for its superior concurrency handling — see DECISIONS.md for details.
- Framework: Next.js 15 (App Router)
- Database: PostgreSQL 16 + Prisma ORM
- Integrity: SHA-256 Hash Chain
- Intelligence: OpenAI, Anthropic, Gemini, Mistral, Ollama (opt-in)
- Styling: Tailwind CSS + Glassmorphism
- Real-time: UDP Syslog Receiver
Created with ❤️ by Datadus. We build IT-Automation and AI-Agents that actually work.
