In-house Projects

In-house Projects

These projects were planned and built by the HIDEFLUX team to show how we approach networking, AI, and security in practice. They are not client engagements and contain no client names or performance figures.

Abstract illustration of dashboard panels and charts
In-house Projects

LINE AI Customer-Service Bot

Overview

A customer-service assistant that lives in a LINE Official Account. It combines a large language model (LLM) with a company knowledge base to answer common questions and look up information, and hands off to a human agent when needed.

Key Features

  • Answers grounded in the company's own documents (FAQs, product guides, terms), with sources cited
  • Rich menus and quick-reply buttons that guide users through common tasks
  • Automatic handoff to a human agent, with on-duty staff notified, for unclear or sensitive requests
  • Conversation logs and knowledge-base content managed centrally in an admin console
  • PII masking: phone numbers, emails, and similar details are de-identified before logging

Architecture

  • Channel: LINE Messaging API (webhooks, reply/push messages, rich menus)
  • Service layer: Cloudflare Workers (TypeScript) for webhook signature verification and message routing
  • AI layer: LLM API + RAG (retrieval-augmented generation): vector search finds relevant passages, then the model drafts a grounded answer
  • Data layer: PostgreSQL for conversation history, user state, and knowledge-base metadata
  • Protection: Cloudflare WAF and rate limiting; admin access gated by Cloudflare Zero Trust

How It's Built

  1. Collect common questions and existing documents into a searchable knowledge base
  2. Set up the LINE Official Account and Messaging API channel; configure the webhook
  3. Implement message intake, signature verification, and routing on Workers
  4. Build the RAG pipeline: chunking, embedding, retrieval, and prompt design
  5. Define human-handoff rules and build the admin console
  6. Test answer quality and edge cases; keep refining the knowledge base after launch
In-house Projects

Internal Management Platform

Overview

An internal web platform that brings leave requests, purchase approvals, inventory, and customer records into one place, replacing scattered spreadsheets and paper forms, with access secured by a Zero Trust model.

Key Features

  • Request forms with multi-level approval workflows and real-time status tracking
  • Role-based access control (RBAC) by department and job function
  • Centralized inventory, order, and customer data with import/export
  • AI assistance: natural-language data queries and auto-generated summary reports
  • Audit logs that make every important change traceable

Architecture

  • Front end: TypeScript single-page app on Cloudflare Pages
  • API: Node.js/TypeScript on Cloudflare Workers
  • Database: PostgreSQL with table-level permission design and scheduled backups
  • Identity & access: Cloudflare Zero Trust (Access) with corporate sign-in; no admin interface exposed to the public internet
  • AI layer: LLM API for natural-language queries and report summaries, limited to authorized data

How It's Built

  1. Interview each department and map current workflows and data flows
  2. Design the data model and permission matrix
  3. Build the API and database; deliver core forms and approval flows
  4. Add Zero Trust access control and audit logging
  5. Layer in AI queries and reporting
  6. Pilot by department, train users, then roll out company-wide
In-house Projects

Website Security Architecture

Overview

A layered protection setup for corporate websites and online services. Security runs behind the scenes so sites stay stable and fast even when facing common attacks.

Key Features

  • Managed DNS and CDN that hide the origin server's address
  • WAF rules that block common web attacks such as SQL injection and XSS
  • Rate limiting and bot management against brute-force attempts and abusive scraping
  • Admin consoles moved behind Zero Trust authentication, never directly exposed
  • Centralized security alerts and logs for faster investigation and response
  • Automated backups and restore drills

Architecture

  • DNS/CDN: Cloudflare DNS and proxy with HTTPS and HSTS enabled
  • Application protection: Cloudflare WAF managed and custom rules, plus rate limiting
  • Access control: Cloudflare Zero Trust (Access, Tunnel) protecting admin and internal services
  • Edge logic: Cloudflare Workers adding security headers and filtering requests
  • Backup: Scheduled PostgreSQL backups stored off-site

How It's Built

  1. Inventory assets: domains, subdomains, public services, and admin interfaces
  2. Move DNS to Cloudflare and enable proxying and certificates
  3. Configure WAF, rate-limiting, and bot rules, starting in log mode before enforcing
  4. Consolidate admin entry points behind Tunnel and Access
  5. Set up alerting, logging, and backups
  6. Run tests and restore drills; document operations

Curious how these approaches could fit your needs? Email [email protected] or book a free consultation on our website.