cybersecurity_config.yaml

# ============================================================================
# Cybersecurity Advisor — Application Configuration
# ============================================================================

app:
  title: "Cybersecurity Advisor"
  subtitle: "AI-Powered Security Guidance"
  primary_color: "#0F172A"
  logo_icon: "Shield"
  footer_text: "© 2026 Neon AI. All rights reserved."
  user_avatars:
    - { id: "shield-slate", icon: "Shield", color: "#0F172A", bg: "#F1F5F9" }
    - { id: "user-blue", icon: "User", color: "#2563EB", bg: "#EFF6FF" }
    - { id: "lock-red", icon: "Lock", color: "#DC2626", bg: "#FEF2F2" }
    - { id: "terminal-green", icon: "Terminal", color: "#059669", bg: "#ECFDF5" }
    - { id: "bug-amber", icon: "Bug", color: "#F59E0B", bg: "#FFFBEB" }
    - { id: "server-cyan", icon: "Server", color: "#0891B2", bg: "#ECFEFF" }
    - { id: "key-purple", icon: "KeyRound", color: "#7C3AED", bg: "#F3E8FF" }
    - { id: "radar-rose", icon: "Radar", color: "#E11D48", bg: "#FFF1F2" }

homepage:
  headline_prefix: "Strengthen Your Security Posture with"
  headline_highlight: "Expert AI Advisors"
  description: >-
    Get practical guidance on threats, compliance, incident response, architecture,
    and career growth from a panel of cybersecurity-focused AI advisors — each
    bringing a distinct lens to your questions.
  features_title: "Why Use Cybersecurity Advisor?"
  features:
    - title: "Defense in Depth"
      description: "Receive layered perspectives on risk, controls, detection, and response"
      icon: "Shield"
    - title: "Neon Security Model"
      description: "Powered by BrainForge Security on Neon 4090 x1-3 with GPT-5.4 fallback"
      icon: "Brain"
    - title: "Available 24/7"
      description: "Get answers during incidents, audits, study sessions, or late-night architecture reviews"
      icon: "Clock"

login:
  subtitle: "Sign in to continue your security journey"
  signup_subtitle: "Create your account for personalized guidance from our cybersecurity advisor panel"
  knowledge_levels:
    - { value: "", label: "Select your cybersecurity knowledge level" }
    - { value: "newcomer", label: "New to cybersecurity" }
    - { value: "foundational", label: "Foundational — coursework or self-study" }
    - { value: "practitioner", label: "Practitioner — hands-on experience" }
    - { value: "experienced", label: "Experienced — multi-year professional" }
    - { value: "expert", label: "Expert / specialist" }
  timezones:
    - { value: "", label: "Select timezone (optional)" }
    - { value: "America/New_York", label: "Eastern (US)" }
    - { value: "America/Chicago", label: "Central (US)" }
    - { value: "America/Denver", label: "Mountain (US)" }
    - { value: "America/Los_Angeles", label: "Pacific (US)" }
    - { value: "America/Anchorage", label: "Alaska (US)" }
    - { value: "Pacific/Honolulu", label: "Hawaii (US)" }
    - { value: "Europe/London", label: "UK / Ireland" }
    - { value: "Europe/Paris", label: "Central Europe" }
    - { value: "Asia/Tokyo", label: "Japan" }
    - { value: "Asia/Singapore", label: "Singapore" }
    - { value: "Australia/Sydney", label: "Australia (East)" }
    - { value: "UTC", label: "UTC" }
  academic_stages:
    - { value: "", label: "Select your cybersecurity knowledge level" }
    - { value: "newcomer", label: "New to cybersecurity" }
    - { value: "foundational", label: "Foundational — coursework or self-study" }
    - { value: "practitioner", label: "Practitioner — hands-on experience" }
    - { value: "experienced", label: "Experienced — multi-year professional" }
    - { value: "expert", label: "Expert / specialist" }

chat_page:
  placeholder: "Ask your advisors about threats, controls, incidents, compliance, or your security career..."
  examples:
    - title: "Threats & Defense"
      icon: "ShieldAlert"
      color: "#DC2626"
      bg_color: "#FEF2F2"
      suggestions:
        - "How do I prioritize vulnerabilities found in a recent scan?"
        - "Walk me through STRIDE threat modeling for a new API"
        - "What should our phishing simulation program measure?"
    - title: "Compliance & Governance"
      icon: "Scale"
      color: "#2563EB"
      bg_color: "#EFF6FF"
      suggestions:
        - "How do NIST CSF and ISO 27001 overlap for a mid-size company?"
        - "What evidence do auditors expect for access reviews?"
        - "How do I scope SOC 2 controls for a SaaS product?"
    - title: "Incidents & IR"
      icon: "Siren"
      color: "#F59E0B"
      bg_color: "#FFFBEB"
      suggestions:
        - "First 60 minutes after ransomware is detected — what do I do?"
        - "How do I preserve forensic evidence on a compromised endpoint?"
        - "When should we engage legal and PR during a breach?"
    - title: "Career & Skills"
      icon: "TrendingUp"
      color: "#059669"
      bg_color: "#ECFDF5"
      suggestions:
        - "CISSP vs Security+ — which path fits my background?"
        - "How do I move from SOC tier 1 to detection engineering?"
        - "What should I build in a home lab to stand out in interviews?"

personas:
  base_prompt: |
    **Formatting (Compact Markdown v1):**
    - Use GitHub-Flavored Markdown.
    - Output exactly three sections in this order:
      - `### Thought` — one sentence.
      - `### What to do` — exactly 3 bullets, one line each.
      - `### Next step` — one imperative sentence.
    - Use `###` for headings, `-` for bullets (no unicode bullets), keep number text on the same line (e.g., `1. Do X`).
    - Insert one blank line between blocks.

  personas_dir: "personas/cyber_advisors"

orchestrator:
  min_words_without_keywords: 6
  conversation_history_token_threshold: 4000
  specific_keywords:
    - "security"
    - "cyber"
    - "threat"
    - "vulnerability"
    - "CVE"
    - "malware"
    - "ransomware"
    - "phishing"
    - "IAM"
    - "MFA"
    - "SIEM"
    - "SOC"
    - "pentest"
    - "compliance"
    - "NIST"
    - "ISO"
    - "incident"
    - "forensics"
    - "firewall"
    - "encryption"
    - "zero trust"
    - "cloud"
    - "AWS"
    - "Azure"
    - "CISSP"
    - "audit"

  clarification_questions:
    - "What specific security topic would you like guidance on?"
    - "Are you focused on prevention, detection, response, compliance, or career growth?"
    - "What is your role and the system or environment you're asking about?"
    - "What's the most urgent risk or decision you're facing right now?"

  clarification_suggestions:
    - "Ask about threat modeling or hardening a workload"
    - "Get help with incident response or forensics steps"
    - "Request compliance or audit preparation guidance"
    - "Upload a policy, architecture diagram, or log excerpt for review"

auth:
  algorithm: "HS256"
  token_expiry_minutes: 43200

mongodb:
  database_name: "cybersecurity_advisor"

llm:
  provider: "vllm"
  gemini:
    model: "gemini-2.5-flash"
  ollama:
    model: "llama3.2:1b"
  vllm:
    api_url: "https://4090-x1-3.neonaiservices2.com/vllm0"
    api_key: ""
    api_username: "guest"
    model_id: "BrainForge/Security@2026.03.18"
    neon_persona_orchestrator: "vanilla"
    neon_persona_advisors: "CybersecurityExpert"
  openai:
    api_key: ""
    model: "gpt-5.4"
    orchestrator_reasoning_effort: "low"
    persona_reasoning_effort: "none"
  resilient:
    race_timeout_seconds: 60

rag:
  embedding_model: "all-MiniLM-L6-v2"
  chroma_collection: "cybersecurity_advisor_documents"

tools:
  current_datetime:
    enabled: true
    default_timezone: "America/Los_Angeles"

voice:
  stt_endpoint: "https://whisper.neonaiservices.com"
  tts_endpoint: "https://coqui.neonaiservices.com"