An anomaly scoring pipeline that analyzes HTTP traffic behavior against website-specific baselines using HBOS.

Inspired by Cloudflare's bot-management architecture.
Ingestor entrypoint
events topic
Detector hot path
decisions topic
Query API read layer
Events Sink events → store
Decisions Sink decisions → store
Baseline Worker fits baselines

Analytics preview

Daily traffic analytics

Explore detector coverage, risk levels, policy actions, score distributions, and baseline usage from replayed traffic.

Explore analytics dashboard →
Total requests
500,000
Evaluated windows
67,821
Scored windows
46,230
Risk levels over time
EClog
LowMediumHighCritical

Work in progress

Session crafter

This section will let visitors generate HTTP session behavior, send it through the ingestor, and watch how the detector responds.

Work in progress

Live decision stream

This section will show decisions as they move through the Query API stream, including recent backfill and live updates from the pipeline.