G1 Guardian is a living, self-learning security system that protects your server 24/7 using GPT-4o AI analysis. It automatically detects, analyzes, and responds to threats in real-time.
- GPT-4o Analysis: Every threat analyzed by OpenAI's latest model
- Self-Learning: Learns from your server's attack patterns
- Pattern Recognition: Remembers and adapts to new threats
- Threat Intel Integration: Auto-updates from NVD, CISA, AlienVault OTX
- β Crypto Mining Detection: CPU spikes, known miner processes
- β Brute Force Protection: SSH/login attempt monitoring
- β DDoS Guard: Traffic analysis and rate limiting
- β Malware Scanning: Rootkit detection, file integrity
- β Privacy Leaks: Mic/camera unauthorized access
- β Dark Web Traffic: Tor/C2 connection detection
- β Phishing/Bot Detection: Domain blocking, bot fingerprinting
- Instant Action: No human needed for critical threats
- Smart Resolution: Blocks IPs, kills processes, quarantines files
- Firewall Integration: iptables (Linux) + pfctl (macOS)
- WhatsApp Alerts: Real-time notifications on your phone
- 24/7 Active: Runs continuously in background
- Real-time system metrics (CPU, RAM, Network)
- Threat timeline and analysis
- Learning rules visualization
- Manual scan controls
- One-click threat resolution
curl -fsSL https://raw.githubusercontent.com/your-repo/g1-guardian/main/install.sh | bash# Clone repository
git clone https://github.com/your-repo/g1-guardian.git
cd g1-guardian
# Install dependencies
cd server && npm install
cd ../client && npm install && npm run build
# Configure
cp server/.env.example server/.env
nano server/.env # Add your OpenAI API key
# Start
cd server && npm startDashboard: http://localhost:3000
- Installation Guide - Complete setup instructions
- Configuration - All config options
- API Reference - REST API documentation
- Architecture - System design
- Protect development servers from crypto miners
- Monitor SSH brute force attempts
- Detect unauthorized access to resources
- 24/7 server monitoring without manual intervention
- Automated threat response
- Compliance with security standards
- Real-time threat intelligence
- Attack pattern analysis
- Incident response automation
- Node.js: v18.0.0 or higher
- RAM: 2 GB minimum (4 GB recommended)
- OS: Linux, macOS, or Windows (WSL2)
- OpenAI API Key: Required for AI analysis
- Backend: Node.js, Express
- Frontend: React, Vite, TailwindCSS
- AI: OpenAI GPT-4o
- Database: JSON-based (no external DB required)
- Monitoring: systeminformation, node-cron
| Feature | Description | Status |
|---|---|---|
| Crypto Mining Detection | Detects XMRig, Monero miners | β Active |
| SSH Brute Force | Blocks after 5 failed attempts | β Active |
| DDoS Protection | Rate limiting, connection monitoring | β Active |
| Rootkit Detection | File integrity, hidden processes | β Active |
| Privacy Leak Detection | Mic/camera unauthorized access | β Active |
| Dark Web Traffic | Tor, C2 connection blocking | β Active |
| Auto IP Blocking | iptables + pfctl integration | β Active |
| WhatsApp Alerts | Real-time notifications | β Active |
- CPU Usage: < 5% idle, < 15% during scans
- RAM Usage: ~200 MB average
- Scan Speed: Full scan in < 30 seconds
- Response Time: < 1 second for critical threats
We welcome contributions! Please see CONTRIBUTING.md for guidelines.
# Fork the repo
git clone https://github.com/your-username/g1-guardian.git
# Create feature branch
git checkout -b feature/amazing-feature
# Commit changes
git commit -m 'Add amazing feature'
# Push and create PR
git push origin feature/amazing-featureThis project is licensed under the MIT License - see the LICENSE file for details.
- OpenAI for GPT-4o API
- systeminformation library
- React and Vite teams
- Security research community
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Email: support@g1guardian.com
- Discord: Join our server
- Docker support
- Kubernetes integration
- Multi-server dashboard
- Mobile app (iOS/Android)
- Advanced ML models
- Cloud deployment (AWS, GCP, Azure)
Made with β€οΈ by the G1 Guardian Team
Website β’ Documentation β’ Blog


