Skip to main content
APT YPS 2025Ops dossierTop 10 national

Case file: pivot / cyber defense assistant

Pivot

Multiplatform cybersecurity co-pilot for SMEs and startup teams

Pivot reframes security guidance as an operational conversation. Teams can ask from whichever channel they already use and still receive grounded, context-aware answers from one retrieval core.

Outcome snapshot

Recognition

Top 10

APT YPS 2025 shortlist

Client surfaces

3

Web, Telegram, Android

Core mode

RAG

FastAPI + LangChain + Gemini

Brief

Built to raise cybersecurity awareness, improve data-protection posture, and reduce phishing risk for SMEs and startups. Everything routes through a single Python RAG core so policies, docs, and conversation history stay aligned—whether someone chats on the web, Telegram, or the Android app.

FastAPI and LangChain orchestrate retrieval; Gemini generates answers; Milvus (Zilliz) holds vectors; MongoDB stores profiles, threads, and metadata. Next.js covers the public UI and operator dashboard; Expo delivers mobile; the Telegram bot meets users where they already work.

Response pipeline

How Pivot turns questions into actionable guidance

01

Ingest

Collect prompts from web, Telegram, and Android clients with unified request shaping.

02

Retrieve

Match vectors and policy docs from Milvus + MongoDB memory to ground each response.

03

Reason

Run Gemini through LangChain orchestration with guardrails tuned for cyber incident guidance.

04

Respond

Return actionable steps to every channel while preserving thread context and operator visibility.

System architecture

One operational core, multiple client fronts

Retrieval, safety, and session memory stay consistent while each surface fits its context.

  • Threat-aware answer engine

    FastAPI + LangChain + Gemini with Milvus retrieval keeps responses grounded in approved cybersecurity references.

  • Shared memory layer

    MongoDB threads and vector-backed context make every client continue the same conversation without drift.

  • Operator command surface

    Dashboard controls for source curation, upload governance, and session visibility during live usage peaks.

  • Multi-channel parity

    Web, Telegram, and Android all call the same orchestration path so guidance quality stays consistent.

Image archive

All project images

Stack

Tools & services

PythonFastAPILangChainGeminiDockerMilvusMongoDBNext.jsExpoTelegram

Operational value

Capabilities that moved the needle for teams

One retrieval brain powers every channel, reducing inconsistent guidance.
Ops dashboard supports source management and run-time observability.
Multimodal pipeline supports text, file, and voice-driven prompts.
Dockerized services simplify deployment and handover for team environments.
Session continuity preserves context across web, Telegram, and mobile clients.
Grounded answers prioritize actionable steps over generic AI responses.

Team

Credits

Pivot team

With thanks to

Aung Thura Kyaw · Min Han Satt Naing · Zarni Maung · Kyaw Maung Maung Thu

Repository & demo

Wire up real URLs when the repo and deployment are public—placeholders for now.