Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG
☆168Sep 21, 2026Updated last week
Alternatives and similar repositories for AI_SOC
Users that are interested in AI_SOC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)☆1,202Updated this week
- AI 驱动的 SOC 仿真平台☆167Jan 2, 2026Updated 9 months ago
- 通过多智能体（Multi-Agent）打造的革命性的安全运营解决方案☆287Jul 7, 2025Updated last year
- Flocks is an agentic SecOps platform.☆480Updated this week
- If you a security engineer or an aspirant Security professional then Setting up a Wazuh home lab environment is an excellent way for SOC …☆24Mar 27, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat detection and response. 80+…☆201Feb 11, 2026Updated 7 months ago
- This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges☆18Nov 5, 2023Updated 2 years ago
- Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response th…☆57Sep 24, 2026Updated last week
- Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆336Updated this week
- Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PC…☆247Updated this week
- ☆13Feb 25, 2021Updated 5 years ago
- Jupyter Notebooks for Digital Forensics & Incident Response☆10Nov 23, 2021Updated 4 years ago
- AIDEFEND MCP is a local-first AI Security Defensive Assistant that brings the full AIDEFEND countermeasure library into your environment …☆19Sep 11, 2026Updated 3 weeks ago
- A repository dedicated to deliver a comprehensive set of tools for integration and convenient use of Kaspersky Threat Intelligence servic…☆26May 20, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆18Jun 18, 2023Updated 3 years ago
- ☆14Jun 4, 2026Updated 3 months ago
- ☆593Updated this week
- 针对企业钓鱼软件攻击模拟☆23Nov 30, 2023Updated 2 years ago
- The application consists of several vulnerable web applications that are integrated with Wazuh.☆22May 1, 2023Updated 3 years ago
- My stuff regarding Copilot for Security☆13Jan 12, 2026Updated 8 months ago
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- LLM-powered security log analyzer: detect threats & anomalies with zero regex — just declare a Pydantic schema. Real-time Telegram alerts…☆65Sep 24, 2026Updated last week
- IoM defualt mal package☆10Feb 22, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MCP Server for Wazuh SIEM☆237Dec 12, 2025Updated 9 months ago
- Deploying of infrastructure and technologies for a SOC as a Service ( SOCasS)☆15Apr 10, 2020Updated 6 years ago
- ☆28Aug 20, 2023Updated 3 years ago
- A quick reference guide for python script development in DFIR☆18Mar 20, 2024Updated 2 years ago
- An open framework for classifying, detecting, and preventing insider threat behaviors.☆40Sep 4, 2026Updated 3 weeks ago
- Repo to hold wazuh manager mcp server☆93Apr 15, 2026Updated 5 months ago
- This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu…☆50Jun 7, 2024Updated 2 years ago
- SOAR MCP Server 是一个创新的安全编排平台集成解决方案，通过 Model Context Protocol 将 SOAR (Security Orchestration, Automation and Response) 能力直接集成到各种 AI 客户端中，包…☆17Apr 26, 2026Updated 5 months ago
- A pipeline for ingesting Jumpcloud directory events into Wazuh☆19May 8, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- HackTheWeb is a production-ready, AI-powered web application penetration testing tool designed for security professionals and ethical hac…☆41Jul 4, 2026Updated 2 months ago
- GreenLogAudit is a simple, modern log auditing system that is very quick to deploy and can even be run from a USB drive. It can be run by…☆26May 26, 2026Updated 4 months ago
- A multi-agent SOC/DFIR assistant powered by LangChain, LangGraph, and OpenAI models. Automates IOC extraction, MITRE ATT&CK mapping, CVE …☆82Apr 2, 2026Updated 6 months ago
- Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.☆31Aug 21, 2026Updated last month
- ☆109Feb 14, 2026Updated 7 months ago
- Autonomous Multi-Agent Based Red Team Testing Service / AI hacker☆23Sep 15, 2025Updated last year
- OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code☆22Dec 11, 2025Updated 9 months ago