IoT · Smart-Home Security · 2024
SHG 4.0
A three-tier smart-home security and automation gateway platform — cloud, on-device, and admin interfaces sharing one backend to monitor hardware, secure a home network, and manage access across one or more properties.
Each installation centers on an “Agent” — conceptually a house — a physical gateway that a user owns or collaborates on, with support for a single account managing more than one property. The platform is split across three coordinated interfaces: a local UI running on the gateway itself for setup, network configuration, and reboot/reset; a cloud UI where end users remotely manage their agents day to day; and an internal admin console for fleet operations. A single dashboard per agent consolidates hardware status, radio-device sensor readings, network security, network monitoring, and input/output control. Underneath, a pluggable driver architecture in the admin console lets hardware and sensor models from different vendors plug into the same system as configurable “drivers” rather than one-off integrations, and a license-tier system lets the business gate advanced capabilities — extra collaborators, network monitoring, automated alert actions — per agent.
- Country
- Italy
- Timeline
- 5 months
- Year
- 2024
- Services
- Platform EngineeringRealtimeMappingAdmin Tooling
The challenge
- A user needed one account to monitor and control potentially more than one property/gateway, not a single-site tool.
- Sensor data, network security events, and hardware status lived in disconnected views, with no consolidated per-property dashboard.
- Multiple people needed access to the same home (family members, tenants) without all of them holding full admin capabilities.
- Hardware and sensors from different vendors needed to plug into one system rather than requiring a custom integration per device type.
- The business needed to gate advanced features — extra collaborators, network monitoring, automated alert actions — behind subscription tiers per gateway.
- Internal staff needed tooling to manage the fleet of deployed gateways — hardware, drivers, configurations — without touching each device directly.
The solution
- Three coordinated interfaces — a local on-device UI, a cloud UI for remote management, and an internal admin console — sharing one JWT-authenticated backend.
- An Agent model letting a single account own or collaborate on multiple properties, with owner/collaborator roles, an invite flow, and ownership transfer.
- A consolidated per-agent dashboard combining hardware status, radio-device sensor readings, network security, network monitoring, and I/O control in one view.
- A network security module with firewall rule management and threat/intrusion monitoring (severity, source/destination IP and location) per gateway.
- A pluggable driver architecture in the admin console — vendor hardware and models plug in as configurable drivers with their own entity schemas and default configuration, instead of custom integrations.
- Configurable, multi-channel alerting (email, web, mobile) with rule-based automated actions tied to specific entities and commands.
- License-based feature tiers — max collaborators, alert automation, network monitoring, starred devices — that admins assign per agent to control what a subscription unlocks.
- Built on Next.js (App Router) with Redux Toolkit and i18n scaffolding, ready to add languages beyond the initial English release.
The results
- One login now gives a user visibility and control over every gateway/property they own or collaborate on, instead of a single-site tool.
- Property owners and collaborators get scoped access without sharing full admin credentials.
- Hardware from multiple vendors plugs into the platform through the driver abstraction, so new device types are onboarded through configuration rather than new custom development.
- Operations staff can manage the entire fleet — hardware, drivers, licenses, configurations — from one internal console instead of touching individual gateways.
- Subscription-tiered licensing gives the business a lever to monetize advanced capabilities per gateway rather than shipping one flat product.
A closer look
