Security engineering / Product
CyberBit Solutions
Public security checks, human-reviewed reporting, and paid digital workflows for small businesses.
Overview
I built CyberBit Solutions to connect public security signals with assessment, reporting, and business operations. The system includes free checks, a human-reviewed Snapshot, and a separate paid Instant Signal Brief.
Problem
Small businesses need to identify and interpret website, email, and domain security signals without invasive testing or an internal security team. Findings need context, review, and a usable next step.
System
The Free Website, Email & Domain Check evaluates 11 defined public-facing controls. Business Email Trust Check and IP, DNS & WebRTC Connection Check provide additional focused tools.
The Snapshot workflow combines intake, admin report preparation, and human review. The Instant Signal Brief instead turns an eligible completed domain check into an automated paid report.
Technical highlights
- A shared set of 11 control definitions feeds free-check scoring and Brief reporting.
- Separate storage and delivery paths support service operations and paid digital reports.
Architecture
A Next.js application connects the public tools and report workflows. Airtable supports service requests, Snapshot orders, and CRM records; Neon/PostgreSQL stores paid-brief state. Resend handles application email and subscriber state.
What I built
- Public checks, shared control definitions, and client-facing JSON exports of scan results.
- Admin report builders, Snapshot print/PDF output, and server-generated paid-brief PDFs.
- Server-side scan eligibility, Stripe checkout and webhook handling, and paid-state access to briefs.
- Operational records, transactional messages, admin notifications and login alerts, and visit/funnel event tracking.
Engineering decisions
- Keep automated public signals separate from human-reviewed assessment. A paid Brief does not become a human-reviewed Snapshot.
- Use Resend Contacts as the newsletter subscriber authority and Airtable as its CRM mirror. Broadcasts are operated manually in Resend.
- Keep Snapshot browser print/PDF output distinct from the paid Brief's server PDF generator.
Security / privacy considerations
The public checks and Snapshot are scoped to nonintrusive public signals and do not guarantee security. Paid-brief eligibility and access are decided on the server. Client scan exports omit internal CRM and follow-up fields.
Current state
An active cybersecurity business and engineering project with a public website.