update

gnx-react/backend/gnx/middleware/ip_whitelist.py

@@ -0,0 +1,105 @@
+"""
+IP Whitelist Middleware
+Only allows requests from internal network
+Backend is NOT accessible from public internet
+"""
+
+from django.http import HttpResponseForbidden
+from django.conf import settings
+import ipaddress
+import logging
+
+logger = logging.getLogger('django.security')
+
+
+class IPWhitelistMiddleware:
+    """
+    Enterprise Security: Only allow requests from whitelisted IPs (internal network)
+    This ensures backend API is NEVER directly accessible from internet
+    """
+    
+    def __init__(self, get_response):
+        self.get_response = get_response
+        
+        # Define allowed internal network ranges
+        self.allowed_networks = [
+            ipaddress.ip_network('127.0.0.0/8'),      # localhost
+            ipaddress.ip_network('10.0.0.0/8'),       # Private Class A
+            ipaddress.ip_network('172.16.0.0/12'),    # Private Class B
+            ipaddress.ip_network('192.168.0.0/16'),   # Private Class C
+            ipaddress.ip_network('::1/128'),          # IPv6 localhost
+            ipaddress.ip_network('fe80::/10'),        # IPv6 link-local
+        ]
+        
+        # Add custom allowed IPs from settings if any
+        custom_allowed = getattr(settings, 'CUSTOM_ALLOWED_IPS', [])
+        for ip in custom_allowed:
+            try:
+                self.allowed_networks.append(ipaddress.ip_network(ip))
+            except ValueError:
+                logger.warning(f"Invalid IP network in CUSTOM_ALLOWED_IPS: {ip}")
+
+    def __call__(self, request):
+        # Get client IP address
+        x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
+        if x_forwarded_for:
+            # Get the first IP in the chain (original client)
+            ip = x_forwarded_for.split(',')[0].strip()
+        else:
+            ip = request.META.get('REMOTE_ADDR')
+
+        # In development, allow all
+        if settings.DEBUG:
+            return self.get_response(request)
+
+        try:
+            client_ip = ipaddress.ip_address(ip)
+            
+            # Check if IP is in allowed networks
+            is_allowed = any(
+                client_ip in network 
+                for network in self.allowed_networks
+            )
+            
+            if not is_allowed:
+                logger.warning(
+                    f"Blocked external access attempt from IP: {ip} "
+                    f"to path: {request.path}"
+                )
+                return HttpResponseForbidden(
+                    "Access Denied: This API is for internal use only. "
+                    "Backend is not accessible from public internet."
+                )
+                
+        except ValueError:
+            logger.error(f"Invalid IP address format: {ip}")
+            return HttpResponseForbidden("Access Denied: Invalid IP address")
+
+        # IP is whitelisted, process request
+        return self.get_response(request)
+
+
+class SecurityHeadersMiddleware:
+    """
+    Additional security headers for defense in depth
+    """
+    
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        
+        # Additional security headers
+        response['X-Content-Type-Options'] = 'nosniff'
+        response['X-Frame-Options'] = 'DENY'
+        response['X-XSS-Protection'] = '1; mode=block'
+        response['Referrer-Policy'] = 'strict-origin-when-cross-origin'
+        response['Permissions-Policy'] = 'geolocation=(), microphone=(), camera=()'
+        
+        # Remove server identification
+        if 'Server' in response:
+            del response['Server']
+        
+        return response
+

gnx-react/backend/gnx/settings.py

@@ -60,6 +60,7 @@ INSTALLED_APPS = [
 MIDDLEWARE = [
     'corsheaders.middleware.CorsMiddleware',
     'django.middleware.security.SecurityMiddleware',
+    'gnx.middleware.ip_whitelist.IPWhitelistMiddleware',  # Production: Block external access
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
@@ -109,6 +110,9 @@ AUTH_PASSWORD_VALIDATORS = [
     },
     {
         'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+        'OPTIONS': {
+            'min_length': 12 if not DEBUG else 8,  # Enterprise-grade in production
+        }
     },
     {
         'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
@@ -118,6 +122,44 @@ AUTH_PASSWORD_VALIDATORS = [
     },
 ]
 
+# ============================================================================
+# PRODUCTION SECURITY SETTINGS
+# Backend accessible ONLY from internal network in production
+# ============================================================================
+
+# Security Headers
+SECURE_SSL_REDIRECT = config('SECURE_SSL_REDIRECT', default=False, cast=bool)
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+SECURE_HSTS_SECONDS = config('SECURE_HSTS_SECONDS', default=31536000 if not DEBUG else 0, cast=int)
+SECURE_HSTS_INCLUDE_SUBDOMAINS = config('SECURE_HSTS_INCLUDE_SUBDOMAINS', default=not DEBUG, cast=bool)
+SECURE_HSTS_PRELOAD = config('SECURE_HSTS_PRELOAD', default=not DEBUG, cast=bool)
+SECURE_CONTENT_TYPE_NOSNIFF = True
+SECURE_BROWSER_XSS_FILTER = True
+X_FRAME_OPTIONS = 'DENY'
+SECURE_REFERRER_POLICY = 'strict-origin-when-cross-origin'
+
+# Session Security
+SESSION_COOKIE_SECURE = config('SESSION_COOKIE_SECURE', default=not DEBUG, cast=bool)
+SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_SAMESITE = 'Strict'
+SESSION_COOKIE_AGE = 1209600  # 2 weeks
+
+# CSRF Security
+CSRF_COOKIE_SECURE = config('CSRF_COOKIE_SECURE', default=not DEBUG, cast=bool)
+CSRF_COOKIE_HTTPONLY = True
+CSRF_COOKIE_SAMESITE = 'Strict'
+CSRF_TRUSTED_ORIGINS = config(
+    'CSRF_TRUSTED_ORIGINS',
+    default='https://gnxsoft.com',
+    cast=lambda v: [s.strip() for s in v.split(',')]
+)
+
+# Internal IPs - Backend should only be accessed from these
+INTERNAL_IPS = ['127.0.0.1', '::1']
+
+# Custom allowed IPs for IP whitelist middleware (comma-separated)
+CUSTOM_ALLOWED_IPS = config('CUSTOM_ALLOWED_IPS', default='', cast=lambda v: [s.strip() for s in v.split(',') if s.strip()])
+
 
 # Internationalization
 # https://docs.djangoproject.com/en/4.2/topics/i18n/
@@ -170,7 +212,20 @@ REST_FRAMEWORK = {
     'DEFAULT_RENDERER_CLASSES': [
         'rest_framework.renderers.JSONRenderer',
         'rest_framework.renderers.BrowsableAPIRenderer',
+    ] if DEBUG else [
+        'rest_framework.renderers.JSONRenderer',  # Production: JSON only, no browsable API
     ],
+    # Rate Limiting (Production)
+    'DEFAULT_THROTTLE_CLASSES': [
+        'rest_framework.throttling.AnonRateThrottle',
+        'rest_framework.throttling.UserRateThrottle',
+    ] if not DEBUG else [],
+    'DEFAULT_THROTTLE_RATES': {
+        'anon': '100/hour',      # Anonymous users
+        'user': '1000/hour',     # Authenticated users
+        'burst': '60/min',       # Short-term burst
+        'sustained': '1000/day', # Long-term sustained
+    },
 }
 
 # CORS Configuration
@@ -181,6 +236,11 @@ CORS_ALLOWED_ORIGINS = [
     "http://127.0.0.1:3001",
 ]
 
+# Add production origins if configured
+PRODUCTION_ORIGINS = config('PRODUCTION_ORIGINS', default='', cast=lambda v: [s.strip() for s in v.split(',') if s.strip()])
+if PRODUCTION_ORIGINS:
+    CORS_ALLOWED_ORIGINS.extend(PRODUCTION_ORIGINS)
+
 CORS_ALLOW_CREDENTIALS = True
 
 CORS_ALLOW_ALL_ORIGINS = DEBUG  # Only allow all origins in development
@@ -229,8 +289,18 @@ LOGGING = {
     'handlers': {
         'file': {
             'level': 'INFO',
-            'class': 'logging.FileHandler',
+            'class': 'logging.handlers.RotatingFileHandler',
             'filename': BASE_DIR / 'logs' / 'django.log',
+            'maxBytes': 1024 * 1024 * 15,  # 15MB
+            'backupCount': 10,
+            'formatter': 'verbose',
+        },
+        'security_file': {
+            'level': 'WARNING',
+            'class': 'logging.handlers.RotatingFileHandler',
+            'filename': BASE_DIR / 'logs' / 'security.log',
+            'maxBytes': 1024 * 1024 * 15,  # 15MB
+            'backupCount': 10,
             'formatter': 'verbose',
         },
         'console': {
@@ -249,6 +319,11 @@ LOGGING = {
             'level': 'INFO',
             'propagate': False,
         },
+        'django.security': {
+            'handlers': ['security_file', 'console'],
+            'level': 'WARNING',
+            'propagate': False,
+        },
         'contact': {
             'handlers': ['file', 'console'],
             'level': 'DEBUG',
@@ -256,3 +331,17 @@ LOGGING = {
         },
     },
 }
+
+# ============================================================================
+# PRODUCTION NOTES
+# ============================================================================
+# In production:
+# 1. Set DEBUG=False in environment
+# 2. Backend runs on 127.0.0.1:8000 (internal only)
+# 3. Firewall blocks external access to port 8000
+# 4. Frontend proxies API calls through Nginx
+# 5. IP Whitelist Middleware blocks non-internal IPs
+# 6. Rate limiting protects against abuse
+# 7. Browsable API disabled (JSON only)
+# ============================================================================
+

gnx-react/backend/gnx/throttling.py

@@ -0,0 +1,61 @@
+"""
+Rate Limiting for Enterprise Security
+Prevents abuse and DDoS attacks
+"""
+
+from rest_framework.throttling import SimpleRateThrottle
+
+
+class BurstRateThrottle(SimpleRateThrottle):
+    """
+    Short-term burst protection
+    """
+    scope = 'burst'
+    
+    def get_cache_key(self, request, view):
+        if request.user.is_authenticated:
+            ident = request.user.pk
+        else:
+            ident = self.get_ident(request)
+        
+        return self.cache_format % {
+            'scope': self.scope,
+            'ident': ident
+        }
+
+
+class SustainedRateThrottle(SimpleRateThrottle):
+    """
+    Long-term sustained rate limiting
+    """
+    scope = 'sustained'
+    
+    def get_cache_key(self, request, view):
+        if request.user.is_authenticated:
+            ident = request.user.pk
+        else:
+            ident = self.get_ident(request)
+        
+        return self.cache_format % {
+            'scope': self.scope,
+            'ident': ident
+        }
+
+
+# Add to settings_production.py:
+"""
+REST_FRAMEWORK = {
+    ...
+    'DEFAULT_THROTTLE_CLASSES': [
+        'gnx.throttling.BurstRateThrottle',
+        'gnx.throttling.SustainedRateThrottle',
+    ],
+    'DEFAULT_THROTTLE_RATES': {
+        'burst': '60/min',
+        'sustained': '1000/day',
+        'anon': '100/hour',
+        'user': '1000/hour',
+    }
+}
+"""
+

gnx-react/backend/production.env.example

@@ -6,8 +6,8 @@ SECRET_KEY=your-super-secret-production-key-here
 DEBUG=False
 ALLOWED_HOSTS=yourdomain.com,www.yourdomain.com,your-server-ip
 
-# Database (Production)
-DATABASE_URL=postgresql://username:password@localhost:5432/gnx_production
+# Database - Using SQLite (default)
+# SQLite is configured in settings.py - no DATABASE_URL needed
 
 # Email Configuration (Production)
 EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend

gnx-react/backend/services/management/commands/import_fresh_services.py

@@ -17,30 +17,10 @@ class Command(BaseCommand):
             
             # Create fresh categories
             categories = {
-                'web-development': {
-                    'name': 'Web Development',
-                    'description': 'Custom web applications and modern websites',
+                'enterprise-content': {
+                    'name': 'Enterprise Content',
+                    'description': 'Enterprise-grade solutions for modern businesses',
                     'display_order': 1
-                },
-                'mobile-development': {
-                    'name': 'Mobile Development',
-                    'description': 'Native and cross-platform mobile applications',
-                    'display_order': 2
-                },
-                'api-development': {
-                    'name': 'API Development',
-                    'description': 'RESTful APIs and microservices architecture',
-                    'display_order': 3
-                },
-                'cloud-services': {
-                    'name': 'Cloud Services',
-                    'description': 'Cloud migration and infrastructure management',
-                    'display_order': 4
-                },
-                'ai-ml': {
-                    'name': 'AI & Machine Learning',
-                    'description': 'Artificial intelligence and machine learning solutions',
-                    'display_order': 5
                 }
             }
             
@@ -61,141 +41,164 @@ class Command(BaseCommand):
             # Create fresh services with detailed data
             services_data = [
                 {
-                    'title': 'Enterprise Web Application',
-                    'description': 'Build powerful, scalable web applications tailored to your business needs. Our expert developers use modern frameworks and technologies to create solutions that drive growth and efficiency.',
-                    'short_description': 'Custom enterprise web applications with modern architecture and scalable infrastructure.',
-                    'slug': 'enterprise-web-application',
+                    'title': 'Custom Software Development',
+                    'description': 'We design and build tailored digital solutions that align precisely with your business goals — delivering reliable, scalable, and future-ready applications that drive measurable value.',
+                    'short_description': 'Tailored digital solutions aligned with your business goals.',
+                    'slug': 'custom-software-development',
                     'icon': 'code',
-                    'price': '25000.00',
-                    'category_slug': 'web-development',
-                    'duration': '8-12 weeks',
-                    'deliverables': 'Complete Web Application, Admin Dashboard, User Authentication System, Database Design, API Integration, Responsive Design, Security Implementation, Testing Suite, Deployment Setup, Documentation, Training Materials, 3 Months Support',
-                    'technologies': 'React, Next.js, TypeScript, Node.js, PostgreSQL, Redis, AWS, Docker, Kubernetes, Jest, Cypress',
-                    'process_steps': 'Discovery & Requirements, UI/UX Design, Architecture Planning, Backend Development, Frontend Development, API Development, Database Setup, Security Implementation, Testing & QA, Deployment, Training, Launch Support',
+                    'price': '50000.00',
+                    'category_slug': 'enterprise-content',
+                    'duration': '12-20 weeks',
+                    'deliverables': 'Custom Application, System Architecture, Database Design, API Development, User Interface, Testing Suite, Deployment Setup, Documentation, Training, 6 Months Support',
+                    'technologies': 'React, Next.js, TypeScript, Node.js, Python, PostgreSQL, MongoDB, Redis, AWS, Docker, Kubernetes',
+                    'process_steps': 'Requirements Analysis, Solution Design, Architecture Planning, Development, Testing, Deployment, Training, Launch Support',
                     'featured': True,
                     'display_order': 1,
                     'features': [
-                        {'title': 'Scalable Architecture', 'description': 'Built with microservices and cloud-native architecture', 'icon': 'cloud'},
-                        {'title': 'Advanced Security', 'description': 'Enterprise-grade security with authentication and authorization', 'icon': 'shield'},
-                        {'title': 'Real-time Features', 'description': 'WebSocket integration for real-time updates and notifications', 'icon': 'bolt'},
-                        {'title': 'Mobile Responsive', 'description': 'Fully responsive design that works on all devices', 'icon': 'mobile'},
-                        {'title': 'Performance Optimized', 'description': 'Optimized for speed and performance with caching strategies', 'icon': 'gauge'},
-                        {'title': 'Analytics Integration', 'description': 'Built-in analytics and reporting capabilities', 'icon': 'chart-bar'}
+                        {'title': 'Custom Solutions', 'description': 'Tailored applications built for your specific needs', 'icon': 'cogs'},
+                        {'title': 'Scalable Architecture', 'description': 'Built to grow with your business', 'icon': 'expand'},
+                        {'title': 'Future-Ready', 'description': 'Modern tech stack for long-term sustainability', 'icon': 'rocket'},
+                        {'title': 'Business Alignment', 'description': 'Solutions that drive measurable business value', 'icon': 'chart-line'},
+                        {'title': 'Reliable', 'description': 'Enterprise-grade reliability and performance', 'icon': 'shield'},
+                        {'title': 'Full Support', 'description': 'Comprehensive training and ongoing support', 'icon': 'headset'}
                     ]
                 },
                 {
-                    'title': 'Cross-Platform Mobile App',
-                    'description': 'Create stunning mobile applications for iOS and Android platforms. We deliver native and cross-platform solutions that provide exceptional user experiences and drive engagement.',
-                    'short_description': 'Native and cross-platform mobile applications with modern UI/UX design.',
-                    'slug': 'cross-platform-mobile-app',
-                    'icon': 'mobile',
+                    'title': 'Data Replication',
+                    'description': 'We ensure secure, real-time synchronization across your databases and systems — maintaining data accuracy, consistency, and availability for mission-critical operations.',
+                    'short_description': 'Secure real-time data synchronization across systems.',
+                    'slug': 'data-replication',
+                    'icon': 'sync',
                     'price': '35000.00',
-                    'category_slug': 'mobile-development',
-                    'duration': '12-16 weeks',
-                    'deliverables': 'iOS Mobile App, Android Mobile App, Admin Panel, Backend API, Push Notifications, Offline Support, App Store Submission, Google Play Submission, User Documentation, Admin Guide, Testing Suite, 6 Months Support',
-                    'technologies': 'React Native, TypeScript, Node.js, MongoDB, Firebase, AWS, App Store Connect, Google Play Console, Jest, Detox',
-                    'process_steps': 'Market Research, UI/UX Design, Prototyping, Backend Development, Mobile App Development, API Integration, Testing, App Store Optimization, Submission Process, Launch Strategy, Post-launch Support',
+                    'category_slug': 'enterprise-content',
+                    'duration': '8-12 weeks',
+                    'deliverables': 'Replication System, Data Pipeline, Monitoring Dashboard, Conflict Resolution, Backup Strategy, Security Configuration, Performance Tuning, Documentation, 6 Months Support',
+                    'technologies': 'PostgreSQL, MySQL, MongoDB, Redis, Apache Kafka, AWS DMS, Azure Data Sync, Change Data Capture, ETL Tools',
+                    'process_steps': 'Data Assessment, Architecture Design, Pipeline Setup, Testing, Security Implementation, Monitoring Setup, Optimization, Documentation, Go-live',
                     'featured': True,
                     'display_order': 2,
                     'features': [
-                        {'title': 'Cross-Platform', 'description': 'Single codebase for both iOS and Android platforms', 'icon': 'mobile'},
-                        {'title': 'Native Performance', 'description': 'Optimized performance using native components and modules', 'icon': 'gauge'},
-                        {'title': 'Offline Support', 'description': 'Full offline functionality with data synchronization', 'icon': 'wifi'},
-                        {'title': 'Push Notifications', 'description': 'Real-time push notifications for user engagement', 'icon': 'bell'},
-                        {'title': 'App Store Ready', 'description': 'Complete app store submission and approval process', 'icon': 'store'},
-                        {'title': 'Analytics Dashboard', 'description': 'Comprehensive analytics and user behavior tracking', 'icon': 'chart-line'}
+                        {'title': 'Real-Time Sync', 'description': 'Instant data synchronization across systems', 'icon': 'bolt'},
+                        {'title': 'Data Accuracy', 'description': 'Ensures consistency and accuracy across databases', 'icon': 'check-circle'},
+                        {'title': 'High Availability', 'description': 'Mission-critical data always available', 'icon': 'server'},
+                        {'title': 'Secure Transfer', 'description': 'Encrypted data transmission and storage', 'icon': 'lock'},
+                        {'title': 'Conflict Resolution', 'description': 'Automated handling of data conflicts', 'icon': 'cogs'},
+                        {'title': 'Performance', 'description': 'Optimized for minimal impact on operations', 'icon': 'gauge'}
                     ]
                 },
                 {
-                    'title': 'RESTful API Development',
-                    'description': 'Build robust, scalable APIs that power your applications and enable seamless integration with third-party services. Our APIs are designed for performance, security, and maintainability.',
-                    'short_description': 'Enterprise-grade RESTful APIs with comprehensive documentation and security.',
-                    'slug': 'restful-api-development',
-                    'icon': 'api',
-                    'price': '15000.00',
-                    'category_slug': 'api-development',
-                    'duration': '4-6 weeks',
-                    'deliverables': 'RESTful API, API Documentation, Authentication System, Rate Limiting, API Testing Suite, Postman Collection, SDK Development, Integration Examples, Performance Monitoring, Security Audit, Deployment Guide, 3 Months Support',
-                    'technologies': 'Node.js, Express, TypeScript, PostgreSQL, Redis, JWT, Swagger, Postman, Jest, AWS API Gateway, Docker',
-                    'process_steps': 'API Planning, Database Design, Authentication Setup, Endpoint Development, Documentation, Testing, Security Review, Performance Optimization, Deployment, Integration Testing, Monitoring Setup',
-                    'featured': False,
+                    'title': 'Incident Management SaaS',
+                    'description': 'We provide intelligent, cloud-based incident management tools that empower teams to detect, respond, and resolve issues faster — minimizing downtime and protecting customer trust.',
+                    'short_description': 'Cloud-based incident management for faster issue resolution.',
+                    'slug': 'incident-management-saas',
+                    'icon': 'bell',
+                    'price': '45000.00',
+                    'category_slug': 'enterprise-content',
+                    'duration': '16-20 weeks',
+                    'deliverables': 'SaaS Platform, Incident Dashboard, Alert System, Integration APIs, Mobile App, Reporting Tools, Analytics, Automation Workflows, Documentation, 12 Months Support',
+                    'technologies': 'React, Node.js, TypeScript, PostgreSQL, Redis, WebSockets, AWS, Kubernetes, PagerDuty API, Slack Integration, Twilio',
+                    'process_steps': 'Requirements Analysis, Platform Design, Core Development, Integration Development, Testing, Security Audit, Deployment, Training, Launch',
+                    'featured': True,
                     'display_order': 3,
                     'features': [
-                        {'title': 'RESTful Design', 'description': 'Clean, intuitive API design following REST principles', 'icon': 'code'},
-                        {'title': 'Comprehensive Documentation', 'description': 'Interactive API documentation with examples', 'icon': 'book'},
-                        {'title': 'Authentication & Security', 'description': 'JWT-based authentication with rate limiting', 'icon': 'shield'},
-                        {'title': 'Performance Optimized', 'description': 'Caching and optimization for high performance', 'icon': 'gauge'},
-                        {'title': 'SDK Support', 'description': 'Client SDKs for easy integration', 'icon': 'puzzle-piece'},
-                        {'title': 'Monitoring & Analytics', 'description': 'Built-in monitoring and usage analytics', 'icon': 'chart-bar'}
-                    ]
-                },
-                {
-                    'title': 'Cloud Migration & DevOps',
-                    'description': 'Migrate your existing infrastructure to the cloud with minimal downtime. We help you leverage cloud technologies for improved scalability, security, and cost efficiency.',
-                    'short_description': 'Complete cloud migration with DevOps automation and monitoring.',
-                    'slug': 'cloud-migration-devops',
-                    'icon': 'cloud',
-                    'price': '45000.00',
-                    'category_slug': 'cloud-services',
-                    'duration': '16-20 weeks',
-                    'deliverables': 'Cloud Infrastructure Setup, Application Migration, CI/CD Pipeline, Monitoring Setup, Security Configuration, Backup Strategy, Disaster Recovery Plan, Cost Optimization, Performance Tuning, Documentation, Training, 6 Months Support',
-                    'technologies': 'AWS, Azure, Google Cloud, Docker, Kubernetes, Terraform, Jenkins, GitLab CI, Prometheus, Grafana, ELK Stack',
-                    'process_steps': 'Infrastructure Assessment, Migration Planning, Security Audit, Infrastructure Setup, Application Migration, CI/CD Implementation, Monitoring Setup, Testing, Go-live, Optimization, Documentation, Training',
-                    'featured': True,
-                    'display_order': 4,
-                    'features': [
-                        {'title': 'Zero Downtime Migration', 'description': 'Seamless migration with minimal service interruption', 'icon': 'clock'},
-                        {'title': 'Cost Optimization', 'description': 'Optimized cloud resources for maximum cost efficiency', 'icon': 'dollar-sign'},
-                        {'title': 'Security First', 'description': 'Enhanced security with cloud-native security features', 'icon': 'shield'},
-                        {'title': 'Automated DevOps', 'description': 'Complete CI/CD pipeline with automated deployments', 'icon': 'cogs'},
-                        {'title': 'Monitoring & Alerting', 'description': 'Comprehensive monitoring and alerting system', 'icon': 'bell'},
-                        {'title': 'Scalability', 'description': 'Auto-scaling infrastructure for handling traffic spikes', 'icon': 'expand'}
+                        {'title': 'Intelligent Detection', 'description': 'AI-powered incident detection and alerting', 'icon': 'brain'},
+                        {'title': 'Rapid Response', 'description': 'Tools to respond and resolve issues faster', 'icon': 'bolt'},
+                        {'title': 'Minimize Downtime', 'description': 'Reduce system downtime and service disruption', 'icon': 'clock'},
+                        {'title': 'Team Collaboration', 'description': 'Empower teams with collaborative tools', 'icon': 'users'},
+                        {'title': 'Cloud-Based', 'description': 'Accessible anywhere, anytime', 'icon': 'cloud'},
+                        {'title': 'Customer Trust', 'description': 'Protect and maintain customer confidence', 'icon': 'shield'}
                     ]
                 },
                 {
                     'title': 'AI-Powered Business Intelligence',
-                    'description': 'Transform your business data into actionable insights with AI-powered analytics and machine learning solutions. Make data-driven decisions with advanced predictive analytics.',
-                    'short_description': 'AI-powered business intelligence and predictive analytics platform.',
+                    'description': 'We transform enterprise data into actionable insights with advanced analytics and AI — enabling smarter decisions, performance optimization, and data-driven innovation.',
+                    'short_description': 'Transform data into insights with AI and advanced analytics.',
                     'slug': 'ai-powered-business-intelligence',
                     'icon': 'brain',
-                    'price': '55000.00',
-                    'category_slug': 'ai-ml',
+                    'price': '60000.00',
+                    'category_slug': 'enterprise-content',
                     'duration': '20-24 weeks',
-                    'deliverables': 'AI Analytics Platform, Machine Learning Models, Data Pipeline, Dashboard Development, Predictive Analytics, Report Generation, API Integration, Data Visualization, Model Training, Performance Monitoring, Documentation, 12 Months Support',
-                    'technologies': 'Python, TensorFlow, PyTorch, Pandas, NumPy, Scikit-learn, React, D3.js, PostgreSQL, Redis, AWS SageMaker, Docker',
-                    'process_steps': 'Data Analysis, Model Selection, Data Pipeline Development, Model Training, Dashboard Development, API Development, Testing, Deployment, Performance Monitoring, Optimization, Documentation, Training',
+                    'deliverables': 'BI Platform, Machine Learning Models, Data Pipeline, Interactive Dashboards, Predictive Analytics, Report Generation, API Integration, Model Training, Documentation, 12 Months Support',
+                    'technologies': 'Python, TensorFlow, PyTorch, Pandas, Scikit-learn, React, D3.js, Tableau, PostgreSQL, Snowflake, AWS SageMaker, Apache Spark',
+                    'process_steps': 'Data Analysis, Model Development, Dashboard Design, Pipeline Development, Training, Integration, Testing, Optimization, Deployment, Training',
                     'featured': True,
-                    'display_order': 5,
+                    'display_order': 4,
                     'features': [
-                        {'title': 'Predictive Analytics', 'description': 'Advanced ML models for business forecasting', 'icon': 'chart-line'},
-                        {'title': 'Real-time Insights', 'description': 'Live data processing and real-time analytics', 'icon': 'bolt'},
-                        {'title': 'Interactive Dashboards', 'description': 'Beautiful, interactive data visualization', 'icon': 'chart-bar'},
-                        {'title': 'Automated Reports', 'description': 'Automated report generation and distribution', 'icon': 'file-alt'},
-                        {'title': 'Data Integration', 'description': 'Seamless integration with existing data sources', 'icon': 'plug'},
-                        {'title': 'Scalable Architecture', 'description': 'Cloud-native architecture for handling big data', 'icon': 'cloud'}
+                        {'title': 'Actionable Insights', 'description': 'Transform raw data into meaningful insights', 'icon': 'lightbulb'},
+                        {'title': 'Advanced Analytics', 'description': 'AI-powered analytics and predictions', 'icon': 'chart-line'},
+                        {'title': 'Smart Decisions', 'description': 'Enable data-driven decision making', 'icon': 'brain'},
+                        {'title': 'Performance Optimization', 'description': 'Identify and optimize business performance', 'icon': 'gauge'},
+                        {'title': 'Data-Driven Innovation', 'description': 'Unlock new opportunities through data', 'icon': 'rocket'},
+                        {'title': 'Enterprise Scale', 'description': 'Built to handle enterprise data volumes', 'icon': 'database'}
                     ]
                 },
                 {
-                    'title': 'E-commerce Platform',
-                    'description': 'Build a complete e-commerce solution with modern features, secure payment processing, and advanced analytics. Create an online store that converts visitors into customers.',
-                    'short_description': 'Complete e-commerce platform with payment processing and analytics.',
-                    'slug': 'ecommerce-platform',
-                    'icon': 'shopping-cart',
-                    'price': '30000.00',
-                    'category_slug': 'web-development',
+                    'title': 'Backend Engineering',
+                    'description': 'We architect and optimize high-performance backend systems — ensuring your applications run securely, efficiently, and scale effortlessly as your business grows.',
+                    'short_description': 'High-performance backend systems that scale effortlessly.',
+                    'slug': 'backend-engineering',
+                    'icon': 'server',
+                    'price': '40000.00',
+                    'category_slug': 'enterprise-content',
+                    'duration': '10-16 weeks',
+                    'deliverables': 'Backend Architecture, API Development, Database Design, Authentication System, Caching Strategy, Performance Optimization, Security Implementation, Testing, Documentation, 6 Months Support',
+                    'technologies': 'Node.js, Python, Django, FastAPI, PostgreSQL, MongoDB, Redis, RabbitMQ, GraphQL, REST, Docker, Kubernetes, AWS',
+                    'process_steps': 'Architecture Design, Database Modeling, API Development, Security Implementation, Optimization, Testing, Deployment, Monitoring Setup, Documentation',
+                    'featured': True,
+                    'display_order': 5,
+                    'features': [
+                        {'title': 'High Performance', 'description': 'Optimized for speed and efficiency', 'icon': 'gauge'},
+                        {'title': 'Secure', 'description': 'Enterprise-grade security implementation', 'icon': 'shield'},
+                        {'title': 'Scalable', 'description': 'Scales effortlessly with business growth', 'icon': 'expand'},
+                        {'title': 'Efficient', 'description': 'Resource-optimized for cost efficiency', 'icon': 'cogs'},
+                        {'title': 'Reliable', 'description': 'Built for uptime and reliability', 'icon': 'check-circle'},
+                        {'title': 'Modern Architecture', 'description': 'Microservices and cloud-native design', 'icon': 'cloud'}
+                    ]
+                },
+                {
+                    'title': 'Frontend Engineering',
+                    'description': 'We craft responsive, accessible, and engaging user interfaces — blending performance with design to deliver exceptional digital experiences across devices and platforms.',
+                    'short_description': 'Responsive, engaging UIs for exceptional digital experiences.',
+                    'slug': 'frontend-engineering',
+                    'icon': 'palette',
+                    'price': '35000.00',
+                    'category_slug': 'enterprise-content',
                     'duration': '10-14 weeks',
-                    'deliverables': 'E-commerce Website, Admin Dashboard, Payment Integration, Inventory Management, Order Management, Customer Portal, Analytics Dashboard, SEO Optimization, Mobile App, Testing Suite, Documentation, 6 Months Support',
-                    'technologies': 'React, Next.js, Node.js, PostgreSQL, Stripe, PayPal, AWS, Redis, Elasticsearch, Jest, Cypress',
-                    'process_steps': 'Requirements Analysis, UI/UX Design, Database Design, Backend Development, Frontend Development, Payment Integration, Testing, SEO Optimization, Performance Tuning, Launch, Marketing Setup, Support',
-                    'featured': False,
+                    'deliverables': 'Frontend Application, Component Library, Responsive Design, Accessibility Implementation, Performance Optimization, Testing Suite, Documentation, Style Guide, 6 Months Support',
+                    'technologies': 'React, Next.js, TypeScript, Vue.js, Tailwind CSS, Material-UI, Redux, GraphQL, Jest, Cypress, Webpack, Vite',
+                    'process_steps': 'UI/UX Design, Component Development, Responsive Implementation, Accessibility Audit, Performance Optimization, Testing, Browser Compatibility, Deployment',
+                    'featured': True,
                     'display_order': 6,
                     'features': [
-                        {'title': 'Secure Payments', 'description': 'Multiple payment gateways with PCI compliance', 'icon': 'credit-card'},
-                        {'title': 'Inventory Management', 'description': 'Advanced inventory tracking and management', 'icon': 'box'},
-                        {'title': 'Customer Analytics', 'description': 'Detailed customer behavior and sales analytics', 'icon': 'chart-bar'},
-                        {'title': 'Mobile Optimized', 'description': 'Fully responsive design for mobile shopping', 'icon': 'mobile'},
-                        {'title': 'SEO Ready', 'description': 'Built-in SEO optimization for better visibility', 'icon': 'search'},
-                        {'title': 'Multi-vendor Support', 'description': 'Support for multiple vendors and marketplace', 'icon': 'store'}
+                        {'title': 'Responsive Design', 'description': 'Flawless experience across all devices', 'icon': 'mobile'},
+                        {'title': 'Accessible', 'description': 'WCAG compliant for all users', 'icon': 'universal-access'},
+                        {'title': 'Engaging UX', 'description': 'Beautiful, intuitive user experiences', 'icon': 'heart'},
+                        {'title': 'High Performance', 'description': 'Optimized for speed and efficiency', 'icon': 'bolt'},
+                        {'title': 'Modern Design', 'description': 'Contemporary design patterns and aesthetics', 'icon': 'palette'},
+                        {'title': 'Cross-Platform', 'description': 'Works seamlessly across browsers and platforms', 'icon': 'window-maximize'}
+                    ]
+                },
+                {
+                    'title': 'External Systems Integrations',
+                    'description': 'We connect everything — from fiscal printers and payment terminals to ERP and cloud platforms — enabling enterprises to operate seamlessly across physical and digital environments.',
+                    'short_description': 'Connect systems for seamless enterprise operations.',
+                    'slug': 'external-systems-integrations',
+                    'icon': 'plug',
+                    'price': '45000.00',
+                    'category_slug': 'enterprise-content',
+                    'duration': '12-18 weeks',
+                    'deliverables': 'Integration Platform, API Connectors, Payment Gateway Integration, ERP Integration, Device Integration, Middleware Development, Testing Suite, Security Implementation, Documentation, 6 Months Support',
+                    'technologies': 'REST APIs, GraphQL, SOAP, gRPC, Kafka, RabbitMQ, OAuth 2.0, SAP, Salesforce, Stripe, PayPal, IoT Protocols, Node.js, Python',
+                    'process_steps': 'Systems Analysis, Integration Design, API Development, Device Setup, Testing, Security Review, Deployment, Monitoring, Documentation, Training',
+                    'featured': True,
+                    'display_order': 7,
+                    'features': [
+                        {'title': 'Universal Connectivity', 'description': 'Connect any system, device, or platform', 'icon': 'network-wired'},
+                        {'title': 'Payment Integration', 'description': 'Payment terminals and gateway integration', 'icon': 'credit-card'},
+                        {'title': 'ERP Integration', 'description': 'Seamless ERP and business system integration', 'icon': 'building'},
+                        {'title': 'IoT Devices', 'description': 'Connect physical devices like fiscal printers', 'icon': 'print'},
+                        {'title': 'Cloud Platforms', 'description': 'Integration with major cloud platforms', 'icon': 'cloud'},
+                        {'title': 'Seamless Operations', 'description': 'Unified operations across all environments', 'icon': 'sync'}
                     ]
                 }
             ]