Integrating Front-End Products and Services for an AI Security Platform
DBB Software built and connected Lakera's front-end products, including the Red red-teaming app, to a real-time backend, third-party model providers, and shared services, so five apps run as one consistent experience.
Industry
Technology
Service
AI Development
Team
3 FE Engineers
Project State
June 2024 - Ongoing
Country
United States
About the Client
Lakera is an AI-native security platform that protects generative AI applications and agents from threats such as prompt injection, data leakage, and model abuse. Its products give enterprises runtime protection, AI red teaming, and workforce AI security, so teams can deploy GenAI without opening up new attack surfaces.
The Client's Initial Request
Lakera engaged DBB Software to build the front ends for its security products and connect them to the platform's real-time backend, model providers, and shared services, so a fast-growing product suite would feel like one product.
A Real-Time Product Experience
Give Red a front end where users can configure evaluations and watch scans run live, backed by the scan pipeline.
01
Consistency Across Products
Keep Red, the Platform, Atlas, and Gandalf looking and behaving as one, instead of drifting into separate apps.
02
Pluggable Model and Auth Integrations
Connect third-party model providers and authentication so the products can grow without re-plumbing.
03
Safe, Gradual Rollout
Ship integrations incrementally without exposing unfinished work to users.
04
Solutions We Delivered
DBB Software staffed an embedded team that built Lakera's product interfaces and integrated them with the backends, providers, and shared libraries behind them.
Red: A Real-Time Red-Teaming Product on Convex
DBB Software built the React front end for Red, Lakera's LLM red-teaming and security-scanning product, and wired it end-to-end to a Convex real-time backend. The Evaluation Studio configuration flow, live scan-progress screens, and results views all read from the same backend, driven by scan-orchestration logic that runs single-shot, single-turn, and multi-turn evaluations with progress tracking and results aggregation.
One Front-End Layer Across Multiple Products
The team integrated the Platform and Atlas front ends with Lakera's back-end APIs by consuming generated gRPC and dashboard contracts, and built the Gandalf prompt-injection game against the Gandalf API. A shared UI-kit component library serves as the contract across products, so Red, the Platform, and Atlas remain visually and behaviorally consistent as each evolves.
Third-Party Auth, Models, and Feature Flags
The team sets up new employees Red runs on dual authentication: a session must be valid with both Auth0 and Convex before a user can log in. DBB Software integrated OpenRouter as the model provider for scans, wired new evaluation models into Convex, and gated rollouts via Unleash and Sentry feature flags, so that partially built integrations ship in dark mode and switch on when they're ready.with the accounts and access they need and walks them through the infrastructure, then cleanly deactivates accounts and access when people leave. Both sides of the lifecycle follow a repeatable process rather than ad-hoc setup.
Automated Data Sync and a Gated Public Demo
The team automated the sync of B3 benchmark and model-evaluation data to Convex using a scripted TypeScript job, keeping evaluation data up to date without manual updates. It also shipped the public Alpha red-demo, a Next.js app integrated with live back-end results and gated behind a JWT and password layer, with Vercel preview deployments for fast iteration.
Results Achieved
The Full Scan Journey Works End to End
A user can configure an evaluation, watch the scan run in real time, and read the results without leaving the product, thanks to the tight integration between the front end and the Convex backend.
Five Apps, One Look and Feel
Red, the Platform, Atlas, Gandalf, and the public demo share a common front-end layer and UI kit, so the products stay consistent rather than drifting into five different styles.
Unfinished Work Ships Dark
Feature-flag gating lets integrations reach production before they're finished and switch on when ready, so releasing code doesn't mean exposing half-built work.
Access Is Locked to Two Checks
Dual Auth0 and Convex authentication means every session must clear both systems, which helps keep the security company's own tooling properly protected.
Integrate Your Products Into One Experience
DBB Software's front-end engineers integrate your products, real-time backends, and third-party providers into a single, consistent experience.
Contact Us
"Most of our work starts with a 30-minute call where someone describes a product they're trying to ship and one part of the engineering picture they can't get around.
If that's where you are, let's set one up; I'll tell you straight whether we're the right fit.”
Mina Morkos
Business Development Manager
Want a similar outcome for your team?
Ask our AI assistant — it can pull related case studies, talk through the approach, and put you in touch with the team if you want a deeper conversation.
