A step-by-step guide on why and how I combined penetration testing tools with local AI to protect a decentralized marketplace.

MyZubster is a decentralized marketplace where users tokenize real‑world assets and trade them using Monero (XMR) payments. But any platform handling tokens, transactions, and sensitive user data must be secure.

Instead of relying on passive security measures or expensive third‑party APIs, I decided to build an autonomous security bot that:

Scans the gateway every hour using Kali Linux tools (nmap, nikto, sqlmap).

Analyzes the results with a local AI model (DeepSeek R1:1.5B running on Ollama).