Kordant
Multi-layered consumer identity protection against predatory AI-driven scams.
Kordant combines five service domains — voice cloning detection, dark web monitoring, spam classification, property monitoring, and data broker removal — into a unified platform with web, iOS, and Android apps.
The Pitch
Scammers are weaponizing AI at scale: voice clones that sound exactly like your family, hyper-personalized phishing messages that bypass filters, and synthetic identities that exploit stolen data within hours of a breach. Legacy credit monitoring is reactive — it tells you after the damage is done.
Kordant flips the model. We detect the scam as it happens:
- VoicePrint analyzes inbound calls in real time to flag synthetic AI-generated voices before you're socially engineered.
- DarkWatch continuously monitors dark web forums, breach databases, and data broker caches — notifying you the moment your credentials, phone, or SSN surface.
- SpamShield intercepts and classifies spam calls and SMS at the network level, blocking threats before they reach your phone.
- HomeTitle monitors county deed records for unauthorized ownership changes, liens, and fraud.
- RemoveBrokers automates data broker opt-out requests to remove your personal info from people-search sites.
Architecture
Unified SolidStart monolith with tRPC, Drizzle ORM, and native mobile apps.
┌──────────────────────────────────────────────────────────────┐
│ Clients │
│ Web (SolidStart) │ iOS (SwiftUI) │ Android (Compose) │ Ext │
└────────────────────┬─────────────────────────────────────────┘
│ tRPC (HTTP/WS)
▼
┌──────────────────────────────────────────────────────────────┐
│ web/ (SolidStart) │
│ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ Frontend (SolidStart + Tailwind) │ │
│ │ Landing │ Auth │ Dashboard │ Service Pages │ │
│ └─────────────────────┬───────────────────────────────────┘ │
│ │ │
│ ┌─────────────────────▼───────────────────────────────────┐ │
│ │ Backend (tRPC routers) │ │
│ │ auth │ user │ family │ billing │ darkwatch │ │ │
│ │ voiceprint │ spamshield │ hometitle │ removebrokers │ │ │
│ │ alerts │ reports │ notifications │ correlation │ │
│ └─────────────────────┬───────────────────────────────────┘ │
│ │ │
│ ┌─────────────────────▼───────────────────────────────────┐ │
│ │ Background Jobs (scheduler + workers) │ │
│ └─────────────────────┬───────────────────────────────────┘ │
└────────────────────────┼──────────────────────────────────────┘
│
┌────────▼────────┐
│ Turso (SQLite)│
│ + Redis │
└─────────────────┘
Directory Structure
kordant/
├── web/ # SolidStart monolith (frontend + tRPC backend)
│ ├── src/
│ │ ├── routes/ # Page routes (landing, auth, dashboard)
│ │ ├── components/ # UI components (primitives, layouts, widgets)
│ │ ├── server/ # tRPC routers, services, database, jobs
│ │ ├── hooks/ # Solid hooks
│ │ ├── lib/ # Shared utilities
│ │ └── theme/ # Generated design tokens
│ └── Dockerfile
├── browser-ext/ # Chrome Manifest V3 extension
├── iOS/Kordant/ # SwiftUI native iOS app
├── android/ # Jetpack Compose native Android app
├── design-tokens/ # Brand tokens (single source of truth)
├── docs/ # Brand guidelines, runbooks
├── scripts/ # Build and deployment scripts
├── tasks/ # Project task tracking
├── docker-compose.yml # Local dev (web + redis; DB is external Turso)
├── docker-compose.prod.yml # Production deployment
└── .github/workflows/ # CI/CD pipelines
Tech Stack
| Layer | Technology |
|---|---|
| Language | TypeScript (Node.js ≥22) |
| Framework | SolidStart (SSR + API server) |
| API | tRPC (type-safe RPC) |
| Database | Turso / SQLite (Drizzle ORM) |
| Cache / Queue | Redis 7 |
| Styling | Tailwind CSS + CSS custom properties |
| Mobile iOS | SwiftUI (native) |
| Mobile Android | Jetpack Compose (native) |
| Extension | Chrome Manifest V3 |
| Auth | JWT + session cookies |
| Billing | Stripe |
| Resend | |
| Push | Firebase Cloud Messaging + APNs |
| SMS | Twilio |
| Design Tokens | JSON → generated TS/Swift/XML |
| CI/CD | Vercel (web) + Docker (scheduler) |
| Monorepo | pnpm workspaces |
| Testing | Vitest |
Getting Started
Prerequisites
- Node.js >= 22.0.0
- pnpm >= 9.0.0
Setup
# Install dependencies
pnpm install
# Copy environment variables
cp .env.example .env
# Edit .env with your Turso credentials
# DATABASE_URL=libsql://your-db.turso.io
# DATABASE_AUTH_TOKEN=your-token
# Run database migrations
pnpm db:migrate
# Start development server
pnpm dev
The web app runs at http://localhost:3000.
Design Tokens
All platforms (web, iOS, Android) share the same design tokens defined in design-tokens/:
design-tokens/
├── colors.json # Brand, semantic, background, text, border colors
├── typography.json # Font family, scale, weights
├── spacing.json # 4px-based spacing scale
├── shadows.json # Elevation definitions
└── radius.json # Border radius scale
Generate platform-specific code:
node scripts/generate-tokens.mjs
This produces:
web/src/theme/tokens.ts— TypeScript constantsiOS/Kordant/Theme/GeneratedTokens.swift— SwiftUI colors + spacingandroid/.../res/values/generated_tokens.xml— Android resources
See docs/BRAND_GUIDELINES.md for full brand guidelines.
Deployment
| Component | Platform | Notes |
|---|---|---|
| Web app | Vercel | git push auto-deploys |
| Database | Turso (managed) | run pnpm db:migrate to apply schema changes |
| Background jobs | Docker on pan |
scheduler + Redis containers |
Setting up the Scheduler (pan server)
The background job scheduler (dark web scans, reports, etc.) runs as Docker containers on your pan server. Run the setup script from anywhere:
# From dev machine (SSHs into pan):
bash scripts/setup-pan.sh
# Or directly on pan:
sudo bash scripts/setup-pan.sh
This installs Docker + Compose, clones the repo to /opt/kordant, creates a systemd service, and starts the scheduler. See the script for details and the optional Gitea post-receive hook for auto-deploy on push.
Scripts
| Command | Description |
|---|---|
pnpm dev |
Start web dev server |
pnpm build |
Build web app for production |
pnpm test |
Run web tests |
pnpm lint |
Lint web app |
pnpm db:migrate |
Run database migrations |
pnpm db:seed |
Seed database with test data |
pnpm build:ext |
Build browser extension |
node scripts/generate-tokens.mjs |
Generate platform design tokens |
bash scripts/setup-pan.sh |
Deploy scheduler to pan server |
Subscription Tiers
| Feature | Basic (Free) | Plus ($9.99/mo) | Premium ($24.99/mo) |
|---|---|---|---|
| Dark web scans | Limited | Unlimited | Unlimited |
| Spam detection | Basic | AI-powered | AI-powered |
| Voice cloning detection | — | Family | Family |
| SSN monitoring | — | — | ✅ |
| Home title protection | — | — | ✅ |
| Real-time blocking | — | — | ✅ |
| 24/7 support | — | — | ✅ |