DEV Community

Discussion on: 🔥 Building Vigilo: A 15MB File Integrity Monitor That Outperforms OSSEC

Collapse
 
raj_247 profile image
Raj Dutta

This is a solid, focused piece of engineering. I really respect that you built it from a real incident instead of as a “resume-driven” security project — that shows product thinking, not just coding.

What I like most:

  • You clearly optimized for the right constraints: low RAM, low noise, low latency.
  • The in-memory baseline + atomic writes + thread safety decisions show strong systems fundamentals.
  • I appreciate that you explicitly state when not to use it — that’s mature engineering judgment.

From my experience building performance-sensitive backend systems and security-aware apps, one thing I’d love to see next is:

  • A small threat model section (what attacks it does / doesn’t detect).
  • Maybe a pluggable alert interface (webhooks / Slack) with async handling to avoid blocking the watcher loop.
  • Optional integrity verification for the baseline itself (e.g., signing it).

Overall, this feels like a practical DevSecOps tool built by someone who understands operational pain. Lean, intentional, and readable — that’s rare.

Collapse
 
freemen_tech profile image
Freemen HOUNGBEDJI

thank you so much , i'm so glad . Your point of view is right