v0.11.2

v0.11.2

Windows Agent

• GUI title now displays version: SecNet Agent v0.11.2
• EXE file properties now show version metadata (File Version, Product Version)
• Rebuild required — reinstall the service to get the new EXE

All Agents

• Version bumped to 0.11.2 across Windows, Linux, and macOS agents

Backend

• get_threat_intel() now cached (TTL 60s) — was fetching all ~39k CrowdSec decisions on every 30s poll
• get_breakdown() cache TTL reduced 300s → 60s — country/ISP/scenario data was up to 7 min stale

v0.11.1 — CPU fix + log rotation

Bug fixes:

• Fixed extreme CPU usage: prime counters before sleep, use non-blocking cpu_percent(interval=None), normalize per-process CPU by cpu count
• Rotate Windows agent log at 5MB, keep 3 backups

v0.11.0 — Coder-discipline cleanup

What changed

Security / Correctness

• Gate auth (check_gate_answer) extracted from chat.py into dedicated gate.py — auth no longer coupled to the OpenAI chat service
• enable_workstations flag now enforced on both /api/workstations/report and /api/workstations endpoints (was only reflected in /api/features)
• chat.py _execute_tool now calls run_scan_locked() instead of run_scan() directly — fixes race with concurrent API-initiated scans

Cleanup / Removed

• Deleted unused /api/alerts endpoint (raw CrowdSec shape, no frontend callers, duplicate of /api/logs/crowdsec)
• Removed dead geoip_provider config field — only ip-api is supported; advertising a setting that did nothing was misleading
• Removed dead _HIGH_KW / seen_critical_ips block in aggregator.get_summary() — computed but never used
• Removed dead get_kanban() function from aggregator.py
• Removed dead duplicate imports across multiple backend services

Config

• geoip_rate_limit is now wired into the actual batch throttle sleep (was defined but ignored)
• network_scan_all uses urllib.parse.urlparse instead of brittle string-stripping to extract host IPs

Frontend

• StatusDot, UtilBar, FirmwareBadge extracted from NetworkHealth.jsx into components/ui.jsx
• NET_GATE_KEY and CHAT_GATE_KEY consolidated as named exports in utils/gate.js — no more inline string literals
• DiscoveryPanel.tsx + types/discovery.ts renamed to .jsx/deleted — project stays in JS

Agents

• Added AGENT_VERSION = "0.11.0" to Windows, Linux, and macOS agents

v0.10.0

What's New

• Auto-discovery: Proxmox VMs/LXCs auto-populate the Infrastructure hosts table on startup. Requires qemu-guest-agent on VMs and static IPs on LXCs.
• Workstation agents: Windows EXE (double-click GUI installer), Linux/Mac one-command install scripts. All run as native OS services.
• CrowdSec alerts: Machine auth (JWT) for the alerts endpoint.
• Feature-aware UI: Tabs and sections hide/show based on what's configured.

Bug Fixes

• Loki/CrowdSec error spam from missing feature flag guards
• UniFi login race condition causing 429 floods
• Docker network subnet collision swallowing VLAN 150
• Infrastructure tab empty (unseeded hosts DB, hardcoded group list)
• Windows agent: native win32evtlog, Win11 compatibility

Windows Agent

Download secnet-agent.exe below. Double-click → Run as administrator → fill in URL and key → Install → Start.

Linux/Mac

git clone https://github.com/danktankk/SecNet.git && cd SecNet/agents
sudo bash install-linux.sh --url http://YOUR_SECNET:8088 --key YOUR_KEY  # Linux
sudo bash install-mac.sh --url http://YOUR_SECNET:8088 --key YOUR_KEY    # macOS

v0.8.1

Documentation with demo screenshots. No code changes from v0.8.

v0.8 - Initial Public Release

SecNet Security Dashboard v0.8

Homelab security dashboard with real-time monitoring across multiple services.

Features

• Security tab - CrowdSec ban tracking, attacker geo-mapping, threat level assessment, attack breakdown by type
• Infrastructure tab - Proxmox VM/CT inventory, host registry with port scanning (gated)
• Network tab - UniFi device health, AP radio stats, client-by-VLAN distribution, switch port faceplate view
• Workstations tab - Windows endpoint monitoring (mock/demo data, wire to WinRM for live)
• Logs tab - CrowdSec, Traefik, UniFi event feeds
• AI HelpDesk - OpenAI-powered security assistant with auth gate
• Auth gate - Server-side validated, rate-limited, constant-time comparison
• Feature flags - Enable/disable any integration via .env
• Stale-data-first UX - localStorage cache, shows data instantly with updating indicator
• Dark/Light mode, fullscreen toggle

Integrations

CrowdSec, UniFi Network, Proxmox VE, Loki, Prometheus, OpenAI (all optional, graceful degradation)

Stack

FastAPI (Python 3.12) + React (Vite) + SQLite, single Docker container