Skip to content
04Security infrastructure
Security · Infrastructure

SLM

Serverless log monitoring & threat alert system

A serverless security monitoring platform that processes logs, identifies suspicious patterns and surfaces threats in a centralized dashboard.

Concepts
  • Serverless architecture
  • Rule-based detection
  • Regex threat rules
  • Severity classification
  • Evidence storage
  • Security monitoring
  • Centralized dashboard
01

The challenge

Small teams generate logs across many services but have no security operations centre. They need detection that runs without servers to maintain and alerts that carry evidence.

02

The system

Logs stream into serverless functions that apply rule-based detection, including regex threat rules, classify severity and store evidence. A centralized dashboard shows alerts, patterns and history.

03

The experience

Alerts read like findings, not noise: what matched, where, how severe, and the evidence behind it.

04

The technology

Next.js on Vercel, Supabase for storage and auth, Node.js detection functions. Rules are data, so new threat patterns ship without a redeploy.

Product interface

Inside SLM.

Interface composition · illustrative data

Architecture

The system, in section.

Tiers from the surface people use down to the data it rests on. Every tier is a boundary we can test and replace on its own.

Tech stack
  • Next.js
  • Vercel
  • Supabase
  • Node.js
DASHBOARDALERTSRULESEVIDENCEDETECTIONSERVERLESS FUNCTIONSREGEX RULE ENGINESEVERITY CLASSIFIERINGESTLOG SOURCESPIPELINESPLATFORMNEXT.JS · VERCELSUPABASENODE.JSSECTION · SLM · SYSTEM DRAWINGDDT
05

The result

Security monitoring that runs at the cost of the logs it processes.

Next

Geoland

Ticketing & business operations platform

09Contact

Let’s buildsomething.

Let's build something

Have a product, platform, or system in mind? Start a conversation.

Studio
Baluwatar-03, Kathmandu, Nepal