Architecture

Architecture

SilentPulse is designed as a modular, scalable system for monitoring security visibility.

System Components

┌─────────────────────────────────────────────────────────────┐
│                         Frontend                             │
│                    (React / Next.js)                        │
└─────────────────────────┬───────────────────────────────────┘
                          │ REST API
┌─────────────────────────▼───────────────────────────────────┐
│                       API Server                             │
│                         (Go)                                 │
└──────┬──────────────────┬───────────────────┬───────────────┘
       │                  │                   │
       ▼                  ▼                   ▼
┌──────────────┐  ┌──────────────┐  ┌──────────────────────┐
│  PostgreSQL  │  │    Redis     │  │   External Systems   │
│   + AGE      │  │   (Cache)    │  │ (Splunk, Kafka, etc) │
└──────────────┘  └──────────────┘  └──────────────────────┘
       ▲                  ▲
       │                  │
┌──────┴──────────────────┴───────────────────────────────────┐
│                        Workers                               │
│              (Collectors + Scheduler)                        │
└─────────────────────────────────────────────────────────────┘

Core Components

API Server

The central orchestrator handling:

• REST API for frontend and integrations
• Authentication and authorization (RBAC)
• Flow management
• Alert handling

Workers

Background processes that:

• Collectors: Query external systems for observation data
• Scheduler: Evaluate expected vs actual observations, generate alerts

PostgreSQL + Apache AGE

• Relational data: users, flows, alerts, configurations
• Graph data: asset relationships, dependency mapping

Redis

• Observation cache (what assets were seen)
• Worker coordination
• Real-time metrics

Data Flow

1. CMDB Sync imports assets into SilentPulse
2. Flows define which assets should report to which systems
3. Workers collect observations from external systems
4. Scheduler compares expected vs actual, generates alerts
5. Notifications dispatch alerts to configured channels

Modules

SilentPulse uses a modular architecture:

Module	Description	License
Core	Pipeline monitoring, alerts, flows	Open Source
MITRE	ATT&CK technique mapping	Open Source
Behavioral	Anomaly detection, TimeTravel	Professional
AI Assistant	Natural language analysis	Enterprise