About This Architecture
Multi-layer security scanning system integrating React frontend, Spring Boot backend, and async processing engine for comprehensive source code and binary analysis. Users upload artifacts through the React UI, triggering the Backend API to create scan jobs and invoke the Scanner Engine asynchronously. The Scanner Engine orchestrates third-party SCA tools (Clarity, FossID) and an internal SBOM tool to detect vulnerabilities and dependencies, normalizing results back to the Database and File Storage. This architecture decouples user-facing operations from long-running security analysis, enabling scalable vulnerability detection without blocking API responses. Fork and customize this diagram on Diagrams.so to adapt SCA tool integrations, add webhook notifications, or implement result aggregation logic.