Security SaaS case study
Vulnerability Intelligence Platform
A tenant-aware vulnerability management system that turns broad advisory feeds into product-specific findings, triage workflows, alerts, and audit-ready operational history.
The platform needed tenant-scoped product inventory, advisory ingestion, vulnerability matching, deduplicated findings, assignment flows, status changes, notes, alerts, and audit logs. It also needed administrative controls so different users could work inside the right tenant and role boundary.
The system had to separate ingestion work from user-facing workflows, protect tenant boundaries, and keep findings explainable. Background processing, durable storage, and clear data models were more important than a surface-level dashboard.
Used a backend-first architecture with FastAPI, PostgreSQL, and Celery so ingestion, matching, and workflow work could scale independently. Prioritized tenant isolation, RBAC, and audit logging because security products need trust at the data-access layer before the interface can be trusted.
Converted broad advisory streams into a tenant-specific vulnerability workflow. Reduced triage noise by tying findings to real product inventory and matching logic.
