Tatu

Tatu — AI-Assisted DevSecOps Platform

Tatu is a security dashboard for DevSecOps teams that monitors Claude Code hooks enforcing security policies: secrets detection, destructive command blocking, PII/LGPD compliance, SAST scanning, and dependency vulnerability checks.

Architecture

tatush/
├── backend/       FastAPI + SQLAlchemy (Python 3.12)
├── frontend/      React 18 + TypeScript + Vite + Tailwind CSS
├── tatu-hook/     Claude Code security hook CLI (Python package)
├── rules/         Built-in YAML/YARA security rule templates
├── k8s/           Kubernetes deployment manifests
└── docker-compose.yml

**Hybrid hook system:** `tatu-hook` runs locally on developer machines as a Claude Code hook. It evaluates security rules locally for instant block/allow decisions, then reports events asynchronously to the Tatu dashboard API.

Quick Start

Prerequisites

• Docker and Docker Compose
• Python 3.10+ (for tatu-hook)
• Git

1. Clone and configure

git clone https://github.com/laboratoriohacker-com/tatu.git
cd tatu
cp .env.example .env
# Edit .env — set TATU_SECRET_KEY and TATU_ADMIN_EMAIL

Generate a secret key:

openssl rand -hex 32

2. Start the platform

make dev

This starts:

• Backend at http://localhost:8000 (FastAPI API)
• Frontend at http://localhost:5173 (React dashboard)

3. Seed sample data

# Seed the built-in security rules
make seed

# Generate sample security events for testing
make generate-events

4. Install tatu-hook on developer machines

# From PyPI
pip install tatu-hook

# Or with YARA support
pip install "tatu-hook[yara]"

# Or from source (for development)
pip install ./tatu-hook

5. Initialize tatu-hook

Create an API key in the dashboard (Settings > API Keys), then:

tatu-hook init --api-url http://localhost:8000 --api-key tatu_xxxxx

This does three things:

1. Creates ~/.tatu/manifest.json with your API configuration
2. Sy