Enterprise security · Veganext · Jun-Jul 2026, ongoing
Shadow-AI discovery & DLP platform
Multi-tenant, on-premise platform that discovers, classifies and controls AI-tool usage across managed company devices.
At a glance
- Six-service backend: a latency-critical policy engine, batched telemetry ingestion, a signed tool catalogue, tenant and device control, DLP, and a stream processor.
- Cross-platform desktop agent written in Rust, plus a browser extension built with deliberately minimal permissions to pass store review.
- Detection built on network and process signals with no TLS interception - an explicit privacy boundary, documented in architecture decision records rather than left implicit.
Stack
RustPython + FastAPITypeScriptNext.jsPostgreSQLRedis StreamsClickHouseAuth0TerraformSemgrepTrivy
Repo and demo
Client work, code is private. The architecture and the evaluation method are covered above, and I'm happy to walk through the code in an interview.