CoreSight Overview

What is CoreSight?

CoreSight is a cyber-physical cartography platform designed for security teams and information systems managers. It allows you to:

• Inventory all IT/OT assets (network equipment, servers, workstations, PLCs, applications...)
• Map physical and logical interconnections
• Evaluate risks and vulnerabilities (CVSS scores, CVEs from NIST NVD)
• Document according to security frameworks
• Collaborate in real-time on cartographies

Use Cases

Operational Security (SOC / CISO)

• Maintain an up-to-date inventory of exposed assets
• Quickly visualize the attack surface
• Correlate CVE vulnerabilities with your infrastructure

Compliance (NIS2 / ISO 27001)

• Produce cartographies compliant with regulatory requirements
• Generate automated audit reports
• Track modification history (audit log)

IT/OT Operations

• Document network flows (flow matrix)
• Manage security zones
• Visualize dependencies between systems

Technical Architecture

┌──────────────────────────────────────────────────────┐
│                    Client Browser                    │
│            React 18 + ReactFlow + Recharts           │
└────────────────────────┬─────────────────────────────┘
                         │ HTTPS + WebSocket
┌────────────────────────▼─────────────────────────────┐
│              Node.js Backend (Express)               │
│      REST API + Socket.io (real-time collab)         │
│   Port 443 — systemd AmbientCapabilities             │
└────────────────────────┬─────────────────────────────┘
                         │
┌────────────────────────▼─────────────────────────────┐
│         SQLite (better-sqlite3-multiple-ciphers)     │
│          Encrypted AES-256-CBC (SQLCipher 4)         │
│       /opt/coresight/server/data/coresight.db        │
└──────────────────────────────────────────────────────┘

Data Model

Assets

Any inventoried element: IP, type, manufacturer, software version, risk score, CVE vulnerabilities, open ports, security zone, location, etc.

Relations

Connections between assets: relation type (network, application, logical), direction, protocols, source/destination ports.

Diagrams (Cartographies)

Organized visual representation of assets and their relations. Each user can create multiple independent diagrams.

Dashboards

Customizable dashboards composed of analytical widgets. Each user has their own dashboard.

Security

Mechanism	Implementation
Data Encryption	SQLCipher (AES-256-CBC, PBKDF2-HMAC-SHA512)
Transport	HTTPS/TLS (Let's Encrypt or self-signed)
Authentication	Token sessions + 2FA TOTP (speakeasy)
Passwords	bcrypt (factor 10)
HTTP Headers	Helmet.js (CSP, HSTS, etc.)
Rate limiting	Per endpoint and per IP
Audit	Full log of all actions