⚡ Quick Start

Get Galaxy Enterprise running in 5 minutes.

Step 1: Install Dependencies

pip install -r infra/backend/requirements.txt

Step 2: Setup Environment

# OAuth2
GOOGLE_CLIENT_ID=xxx
GOOGLE_CLIENT_SECRET=xxx

# Database
DATABASE_URL=postgresql://user:pass@localhost/galaxy_enterprise

# JWT Secret
JWT_SECRET=$(openssl rand -hex 32)

# Cloudflare
CF_API_TOKEN=xxx
CF_ACCOUNT_ID=xxx

Step 3: Start Server

uvicorn infra.backend.enterprise_dashboard:app --reload --port 8000

Step 4: Open Dashboard

Visit /api/enterprise_dashboard.html and click "Login with Google"

📦 Installation

System Requirements

Development Installation

For local development, you can use SQLite:

git clone https://github.com/galaxy-enterprise/pitch
cd pitch
python -m venv venv
source venv/bin/activate
pip install -r infra/backend/requirements.txt
createdb galaxy_enterprise
export DATABASE_URL="postgresql://localhost/galaxy_enterprise"
uvicorn infra.backend.enterprise_dashboard:app --reload

Production Deployment

For production, deploy to Cloudflare Workers or AWS:

• Cloudflare: Use Wrangler CLI to deploy Workers and D1
• AWS: Deploy to ECS Fargate with RDS PostgreSQL
• On-Premise: Docker containers with Kubernetes

🔐 OAuth2 Authentication

Galaxy Enterprise supports multiple OAuth2 providers for seamless enterprise SSO.

Supported Providers

• Google Workspace - Best for SMBs
• GitHub Enterprise - Best for tech teams
• Okta OIDC - Best for enterprises
• SAML 2.0 - Custom identity providers

Setup Google OAuth

1. Go to Google Cloud Console
2. Create OAuth 2.0 Client ID (Web)
3. Set redirect URI: /api/auth/callback/google
4. Copy Client ID and Secret to .env.enterprise

Setup Okta (Enterprise)

1. Create Okta developer account at developer.okta.com
2. Create OIDC App Integration
3. Configure redirect URI
4. Set environment variables

📊 Dashboard

The Galaxy Enterprise dashboard provides real-time visibility into all threats.

Dashboard Widgets

🔌 SIEM Integration

Send threat data to your existing SIEM platform.

Supported Platforms

Configuration Example

curl -X POST /api/enterprise/siem/configure \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "provider": "splunk",
    "endpoint": "https://splunk.company.com:8088/services/collector",
    "api_key": "your-splunk-hec-token"
  }'

🚨 Auto-Remediation

Automatically respond to threats with zero human intervention.

Remediation Actions

• Block IP: Add to Cloudflare WAF block list
• Rate Limit: Limit requests to 10/minute
• Challenge: Require CAPTCHA verification
• Isolate Network: Disable outbound connections
• Kill C2: Block C2 domains at DNS
• Emergency Backup: Trigger backup to S3
• Human Alert: Notify security team

Severity-Based Triggers

🔒 Security

Data Protection

• ✅ TLS 1.3 encryption for all transit
• ✅ Database encryption at rest
• ✅ OAuth2 for authentication
• ✅ JWT tokens with 7-day expiry
• ✅ HMAC signature verification
• ✅ API key rate limiting

Compliance

• 📋 SOC 2 Type II certified
• 📋 GDPR compliant
• 📋 HIPAA compatible
• 📋 PCI-DSS aligned

❓ Frequently Asked Questions

How much does Galaxy Enterprise cost?

Pricing starts at $100/month for Premium tier. Enterprise and Critical Infrastructure tiers available. Free tier includes public dashboard.

Can I deploy Galaxy on-premises?

Yes! Galaxy supports deployment to Cloudflare Workers, AWS, on-premises Kubernetes, or Docker.

What's the setup time?

Basic setup takes 5 minutes. Full enterprise setup with all integrations takes 1-2 hours.

How many devices can I monitor?

Galaxy scales to millions of devices. Infrastructure automatically scales based on load.

Do you support custom integrations?

Yes! Use our API Marketplace to build custom integrations or use generic webhooks.

🛠️ Troubleshooting

OAuth Login Not Working

• Check Client ID and Secret in .env.enterprise
• Verify redirect URI matches exactly: /api/auth/callback/google
• Check system clock (OAuth tokens expire quickly)

Database Connection Error

• Check PostgreSQL is running: brew services list
• Verify credentials in DATABASE_URL
• Create database: createdb galaxy_enterprise

Cloudflare Integration Not Working

• Check CF_API_TOKEN is valid
• Verify token has correct scopes (zones:read, account:read)
• Ensure CF_ACCOUNT_ID is set correctly