Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
☆216Aug 9, 2026Updated this week
Alternatives and similar repositories for Wazuh-MCP-Server
Users that are interested in Wazuh-MCP-Server are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP Server for Wazuh SIEM☆232Dec 12, 2025Updated 7 months ago
- The GenAI API Pentest Platform is a API security testing tool that leverages multiple Large Language Models (LLMs) to perform intelligent…☆18Aug 21, 2025Updated 11 months ago
- A containerized FastAPI microservice that exposes FFmpeg capabilities via a REST API. This service supports advanced codecs (VP9, AV1, H.…☆44Dec 8, 2025Updated 8 months ago
- Repo to hold wazuh manager mcp server☆88Apr 15, 2026Updated 3 months ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆25Aug 13, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A meticulously crafted collection of 75+ specialized Claude Code sub-agents designed for accuracy, efficiency, and comprehensive software…☆28Aug 9, 2025Updated last year
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆75Updated this week
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,374Mar 11, 2026Updated 5 months ago
- ☆15Sep 20, 2025Updated 10 months ago
- SOCFortress CoPilot☆512Updated this week
- INVENTORY é um painel web que exibe dados extraídos da API do Wazuh, via SysCollector. A solução oferece acesso rápido a detalhes do sis…☆54Jun 24, 2026Updated last month
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- 🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM☆134Jul 21, 2026Updated 3 weeks ago
- CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of sp…☆15May 28, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The application consists of several vulnerable web applications that are integrated with Wazuh.☆22May 1, 2023Updated 3 years ago
- ☆40Aug 3, 2026Updated last week
- Send wazuh alert to telegram by telegram bot.☆15Nov 26, 2022Updated 3 years ago
- Automated multi-tenant provisioning for Wazuh SIEM☆17Jun 24, 2026Updated last month
- ☆21Jan 20, 2023Updated 3 years ago
- Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG☆147May 24, 2026Updated 2 months ago
- This will be the repo for the BTHb.☆37Jul 27, 2026Updated 2 weeks ago
- Machine Learning Codec Video Quality Assessment☆20Apr 3, 2024Updated 2 years ago
- Detection intelligence turbocharged with Al.☆542Mar 3, 2026Updated 5 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- CyberPreacher cloud project collection☆16Dec 21, 2025Updated 7 months ago
- SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incide…☆136Feb 21, 2025Updated last year
- CyberSecurity BLUE TEAM containerized platform that brings together open-source tools for SIEM, DFIR, CTI, SOAR, and Network Analysis☆545Apr 18, 2026Updated 3 months ago
- Embedded NoSQL database for Node.js — pure JavaScript SQLite alternative with MongoDB-style queries. Zero native dependencies, no node-gy…☆29Updated this week
- Useful scripts for those administering Wazuh☆97Jan 6, 2026Updated 7 months ago
- AI-Agentic Threat Intelligence - 39 collectors, 7 AI agents, 3-link proof chain, D1-D5 exposure scoring☆67Mar 16, 2026Updated 4 months ago
- AI-Driven Breach and Attack Simulation Tool (Initial Proof of Concept for AI Pentest Copilot)☆28Jan 6, 2025Updated last year
- ☆19Nov 30, 2025Updated 8 months ago
- The Wazuh agent for endpoints.☆112Jul 7, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆23Jun 28, 2025Updated last year
- Security automation with n8n ideas: 100+ Red/Blue/AppSec workflows, integrations, and ready-to-run playbooks.☆898Sep 20, 2025Updated 10 months ago
- LLM Combinator exports real-time results of multi-modal Ollama executions with input from Frigate cameras and HA sensors into HomeAssista…☆16Nov 10, 2024Updated last year
- DiffuGen is a powerful yet user-friendly interface for local\edge image generation. Built on the Model Control Protocol (MCP), it provide…☆19Apr 7, 2025Updated last year
- This project is an AI-powered Security Information and Event Management (SIEM) system designed for real-time threat detection and respons…☆26Nov 10, 2024Updated last year
- Obfuscated PowerShell reverse shells for security research and testing purposes.☆32Apr 24, 2026Updated 3 months ago
- My scripts for Ghidra.☆26Oct 9, 2025Updated 10 months ago