The latest articles on DEV Community by venkat sathu (@venkat_sathu_7cdef46cf105). https://dev.to/venkat_sathu_7cdef46cf105 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4008733%2Fe8d6407a-934f-4713-8359-43674411510e.png https://dev.to/venkat_sathu_7cdef46cf105 en venkat sathu Mon, 29 Jun 2026 20:44:07 +0000 https://dev.to/venkat_sathu_7cdef46cf105/how-we-built-threatledger-ai-powered-ndr-on-aws-aurora-vercel-in-72-hours-4212 https://dev.to/venkat_sathu_7cdef46cf105/how-we-built-threatledger-ai-powered-ndr-on-aws-aurora-vercel-in-72-hours-4212 <p><em>This post was created for the purposes of entering the H0: Hack the Zero Stack Hackathon. #H0Hackathon</em></p> <h2> The problem </h2> <p>Small businesses face the same network threats as enterprises but can't afford $100K/year NDR tools. We built ThreatLedger to change that.</p> <h2> What we built </h2> <p>ThreatLedger is a cloud-native Network Detection and Response dashboard that turns raw security logs into actionable threat intelligence using AI.</p> <p><strong>Live demo:</strong> <a href="https://threatledger-app.vercel.app" rel="noopener noreferrer">https://threatledger-app.vercel.app</a></p> <h2> The stack </h2> <ul> <li> <strong>Frontend:</strong> Next.js 16 on Vercel (scaffolded with v0)</li> <li> <strong>Database:</strong> Amazon Aurora PostgreSQL (AWS us-east-1) with pgvector</li> <li> <strong>ORM:</strong> Prisma</li> <li> <strong>Auth:</strong> Clerk</li> <li> <strong>AI:</strong> ChatGPT API</li> </ul> <h2> How it works </h2> <ol> <li>Upload Suricata, Zeek, Firewall CSV, or AWS VPC Flow logs</li> <li>Custom parsers extract and normalize alerts</li> <li>Correlation engine groups alerts into attack campaigns with composite risk scores</li> <li>Kill chain mapping shows attack progression</li> <li>Claude API generates plain-English threat summaries</li> </ol> <h2> Why Aurora PostgreSQL </h2> <p>Aurora gave us a production-ready database from day one. We enabled pgvector for future semantic search across 21,742 IP reputation records. The Prisma + Aurora combination gave us type-safe queries with zero configuration overhead.</p> <h2> Biggest challenge </h2> <p>Getting Prisma 7 working with Aurora on Vercel's serverless environment required configuring PrismaPg adapter with connection pooling and handling SSL correctly.</p> <h2> What's next </h2> <p>Semantic similarity search using pgvector, MITRE ATT&amp;CK mapping, and real-time log streaming.</p> <p><em>Built for the H0: Hack the Zero Stack Hackathon #H0Hackathon</em></p> ai aws cybersecurity showdev