Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
☆263Oct 30, 2026Updated last week
Alternatives and similar repositories for Wazuh-MCP-Server
Users that are interested in Wazuh-MCP-Server are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP Server for Wazuh SIEM☆240Dec 12, 2025Updated 10 months ago
- Repo to hold wazuh manager mcp server☆94Oct 11, 2026Updated 3 weeks ago
- Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker imag…☆58Dec 7, 2025Updated 10 months ago
- OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings☆26Aug 13, 2024Updated 2 years ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆90Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,426Mar 11, 2026Updated 7 months ago
- ☆15Sep 20, 2025Updated last year
- SOCFortress CoPilot☆542Updated this week
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- Send wazuh alert to telegram by telegram bot.☆15Nov 26, 2022Updated 3 years ago
- Wazuh decoder for mikrotik logs and monitoring login/logout wireguard peers☆41Jun 19, 2024Updated 2 years ago
- Wazuh rules and integration script for querying file hashes against a MISP instance, generating alerts on matches, and optionally pushing…☆21Oct 6, 2025Updated last year
- A configuration to allow Wazuh to communicate with ChatGPT, based on https://loggar.hashnode.dev/augmenting-wazuh-with-chatgpt-integratio…☆25Mar 20, 2023Updated 3 years ago
- INVENTORY é um painel web que exibe dados extraídos da API do Wazuh, via SysCollector. A solução oferece acesso rápido a detalhes do sis…☆62Oct 24, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG☆175Sep 21, 2026Updated last month
- MCP server for querying OpenCTI threat intelligence, indicators, reports, malware, and threat actors.☆42Aug 3, 2026Updated 3 months ago
- Decoders and Rules for Fortigate in Wazuh☆79Mar 26, 2024Updated 2 years ago
- Automated Detection-as-Code (DaC) CI/CD pipeline for validating and programmatically deploying SIEM detection rules via GitHub Actions an…☆12Aug 31, 2026Updated 2 months ago
- Tools for Wazuh by Juan C. Tello☆17Jan 13, 2022Updated 4 years ago
- (Unofficial) Wazuh integration to send alerts to IRIS.☆23Jan 1, 2025Updated last year
- Detection intelligence turbocharged with Al.☆555Updated this week
- The SOC Entity Triage workbook is designed to enhance the triage process for security operation centers (SOCs) by providing a comprehensi…☆10Mar 19, 2024Updated 2 years ago
- ☆18Jan 5, 2026Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A production ready Dockered MISP☆400Updated this week
- Our collection of Wazuh detection rules for our Offense Lab☆21Feb 13, 2022Updated 4 years ago
- MCP Server for TheHive☆16Dec 6, 2025Updated 11 months ago
- mcpserver-audit: Helps you check if MCP servers are safe before using them. Examines servers for security problems, supports publishing f…☆26Jul 14, 2026Updated 3 months ago
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆47Oct 4, 2026Updated last month
- Entire CICD Architecture for Network Automaion using Ansible Tower, GitLab, GitLab Runner, WebHooks☆23Apr 25, 2023Updated 3 years ago
- This will be the repo for the BTHb.☆42Jul 27, 2026Updated 3 months ago
- Wazuh extension looking up alert data against indicators in OpenCTI threat intel☆21Feb 4, 2024Updated 2 years ago
- MCP-CyberAgent is an MCP-compliant AI security assistant that connects Claude Desktop (or any MCP client) with real-world cybersecurity t…☆10May 28, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A lightweight Python tool to analyze PCAP files and generate network traffic reports. It detects traffic patterns, security concerns, and…☆19Sep 25, 2024Updated 2 years ago
- SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incide…☆139Feb 21, 2025Updated last year
- Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)☆1,225Sep 29, 2026Updated last month
- A solution for deepfake detection across multiple modalities, including images, audio, and video, using ML models like CNNs, Transformers…☆15Aug 18, 2024Updated 2 years ago
- PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection…☆746Aug 22, 2026Updated 2 months ago
- Security automation with n8n ideas: 100+ Red/Blue/AppSec workflows, integrations, and ready-to-run playbooks.☆966Sep 20, 2025Updated last year
- ☆17Oct 28, 2021Updated 5 years ago