CyberThreatGotchi

Your network's Tamagotchi guardian. Real threats in · mood out · evidence saved. Open source · MIT · v1.1.0

CypherTek Rache enclosure — CyberThreatGotchi edge IPS hardware on BPI-R3 Mini

Not a toy firewall.
A field sensor with soul.

  • Live packet capture or simulation mode for dev
  • Signatures, YARA, ClamAV, SHA256 deny-list scoring
  • IPS auto-block on Linux (iptables)
  • SQLite threat log + tamper-evident audit chain
  • Flask web UI with Feed / Pet controls
  • Webhooks to SOC, Bjorn bridge, or custom receivers
  • Pro threat-feed API (Stripe-ready subscriptions)

Meet Cipherhorn

Cipherhorn is your unicorn CISO — business suit, mask, and a mood that tracks threat pressure in real time. Idle when calm. Alert on scans. Attack mode when IPS fires.

Three cat sentinels back the personas: business risk, mass-market alerts, and SOC analyst mode. Sprites animate on the web; e-ink gets the retro Tamagotchi treatment.

Under the hood

Sniffer

Scapy live capture on BPI-R3 Mini · auto-simulation on Windows dev.

Detector

Port scan heuristics + signature engine + AV pipeline.

Gotchi FSM

Hunger, happiness, security XP, level-ups on handled threats.

Displays

Terminal · Flask web · Waveshare e-ink · SPI LCD arcade shell.

Print it. Flash it. Desk it.

  • Banana Pi BPI-R3 Mini — 2× 2.5GbE production target
  • Waveshare 2.13" e-ink — Tamagotchi enclosure STLs included
  • 2.4" ILI9341 LCD — color "arcade" variant STLs
  • M5Stack Cardputer — remote status via HTTP poll
  • Docker compose for homelab one-liner deploy
CypherTek Rache enclosure — CyberThreatGotchi edge IPS hardware

Philadelphia direct ship

$219

Field Pack

Core kit + M5 Cardputer (Remote Possibility ready) + quick-start.

Shop fieldPack ?

Firmware downloads

Edge IPS software for Banana Pi BPI-R3 Mini, homelab Docker, or Windows simulation. Tagged releases bundle STLs, sprites, and source; Philly kits ship with a flashed SD image.

Field remote firmware for M5 Cardputer ? Cardputer firmware downloads.

git clone https://github.com/salvador-Data/cyberThreatGotchi
cd cyberThreatGotchi
python -m venv .venv && .venv\Scripts\activate
pip install -r requirements.txt
python main.py --simulation --web
# ? http://127.0.0.1:8765/

Full about doc ? · API reference ?