TopicAI: Agentic AI-Driven Secure API Testing & Analysis Platform

Overview

TopicAI is a comprehensive, enterprise-grade platform designed to automate and secure the API testing lifecycle using Agentic AI. The platform integrates advanced vulnerability analysis, real-time audit logging, and sophisticated security protocols to ensure that API endpoints are resilient against modern threats. By leveraging OpenAI for intelligent analysis and Ory for robust identity management, TopicAI provides a seamless experience for both developers and security administrators.

Core Features

Agentic AI Analysis

• Intelligent vulnerability detection using OpenAI models.
• Automated security scoring and risk assessment for API projects.
• Context-aware recommendations for remediation based on discovered vulnerabilities.

Secure API Testing Lifecycle

• Project-based organization for API testing suites.
• Vulnerability tracking with severity classification (Critical, High, Medium, Low, Info).
• Detailed reporting and findings summary for every project.

Enterprise Identity & Access Management

• Integration with Ory Network for secure, production-ready authentication.
• Role-Based Access Control (RBAC) to distinguish between standard users and administrators.
• Support for secure session management and administrative elevation.

Comprehensive Audit Logging

• Real-time tracking of all critical system actions.
• Detailed success/failure reporting for security events.
• Administrative tools for log purging and historical analysis.

Administrative Ecosystem

• Unified dashboard for platform-wide statistics and user management.
• Integrated newsletter and inquiry handling system.
• Global visibility into all projects and discovered vulnerabilities.

Technical Architecture

Backend

• Node.js & Express: Core API framework.
• MongoDB & Mongoose: Scalable data persistence for users, projects, and logs.
• Ory Client: Integration for identity and session validation.
• OpenAI SDK: Powering the intelligent analysis engine.
• Security Middleware: Implementation of Helmet, Rate Limiting, and Mongo Sanitize for defense-in-depth.

Frontend (User & Admin Portals)

• Next.js: Framework for both the main application and the administrative interface.
• Tailwind CSS: Modern, utility-first styling for a premium UI/UX.
• Framer Motion: Professional animations within the admin portal.
• Recharts: Data visualization for security statistics and audit metrics.

Installation

Prerequisites

• Node.js (v18 or higher)
• MongoDB instance
• Ory Network account and project
• OpenAI API Key

Setup Instructions

1. Clone the repository:

   git clone https://github.com/AbdulAHAD968/Agentic-AI-Driven-Secure-API-Testing-Analysis-Platform.git

2. Install dependencies for all components:

   # Backend
   cd BACKEND
   npm install
   
   # Frontend
   cd ../frontend
   npm install
   
   # Admin Portal
   cd ../admin
   npm install

3. Configure environment variables in the .env files within each directory.

4. Initialize the administrative user:

   cd BACKEND
   npm run seed:admin

5. Start the development servers:

   # Backend
   npm run dev
   
   # Frontend/Admin
   npm run dev

Security Implementation

TopicAI prioritizes security at every layer:

• Data Protection: Encryption at rest and in transit.
• API Security: Strict rate limiting and input sanitization to prevent injection attacks.
• Auditability: Every administrative action is recorded in audit logs.
• Authentication: Modern identity patterns via Ory.

License

This project is licensed under the ISC License.