Zero-Health

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #cli #claude-code #codex #developer-tools #react #windows

★ 47 Open GitHub ↗

Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application security and ethical hacking. It contains vulnerabilities from OWASP top 10 Web, API and AI/LLM Security Vulnerabilities. Highly vulnerable, never use in production.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Zero Health - Deliberately Vulnerable Healthcare Portal with AI Assistant

⚠️ **WARNING: This is a deliberately vulnerable application for educational purposes only. Do not use in production or with real data.**

![image](https://github.com/user-attachments/assets/36873934-d7d5-49b5-b730-d6e71b8c8325)

## About

Zero Health is a deliberately vulnerable healthcare portal designed to demonstrate critical security vulnerabilities in medical technology. Healthcare systems are prime targets for cyberattacks due to their valuable personal health information (PHI), financial data, and critical infrastructure. A single breach can compromise patient privacy, disrupt life-saving treatments, and violate regulations like HIPAA.

This educational platform demonstrates:
- Common web security vulnerabilities in healthcare applications
- AI/LLM integration security risks and prompt injection vulnerabilities  
- The devastating impact of poor security practices in medical environments
- Why robust security is essential for protecting patient data and maintaining trust

For full list of challenges: (https://github.com/aligorithm/Zero-Health/blob/main/challenges.md)

**Why Healthcare Security Matters**: Medical devices, patient portals, and health records systems require the highest security standards. Vulnerabilities can lead to ransomware attacks shutting down hospitals, identity theft from exposed patient data, or even manipulation of medical devices. This application helps developers understand these risks before building real healthcare systems.

## Prerequisites

- **Docker and Docker Compose** (recommended setup)
- **OpenAI-compatible API key** for chatbot functionality (OpenAI, Groq, LM Studio, Ollama, etc.)
- OR Node.js (v16+) and PostgreSQL for manual setup

## Quick Setup

I made a [Demo Video](https://youtu.be/h3jm83jw33Q) explaining everything.

### 1. Clone Repository
```bash
git clone https://github.com/aligorithm/zero-health.git
cd zero-health
```

### 2. AI Provider Configuration

Zero Health now supports **multiple LLM providers** with simplified configuration using environment files.

#### Quick Start (Recommended)
```bash
# 1. Copy the example environment file
cp .env.example .env

# 2. Edit .env with your preferred provider
# 3. Start the application
docker-compose up --build
```

#### Provider Options

**Option A: OpenAI (Default)**
```bash
# Edit .env file:
LLM_PROVIDER=openai
LLM_API_KEY=sk-your-key-here
LLM_MODEL=gpt-4o-mini