Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG
☆172Sep 21, 2026Updated last month
Alternatives and similar repositories for AI_SOC
Users that are interested in AI_SOC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI 驱动的 SOC 仿真平台☆167Jan 2, 2026Updated 9 months ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆90Aug 12, 2026Updated 2 months ago
- 通过多智能体（Multi-Agent）打造的革命性的安全运营解决方案☆289Jul 7, 2025Updated last year
- Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response th…☆60Sep 24, 2026Updated last month
- Flocks is an agentic SecOps platform.☆499Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆400Updated this week
- ☆15Sep 20, 2025Updated last year
- 🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat detection and response. 80+…☆201Feb 11, 2026Updated 8 months ago
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PC…☆257Updated this week
- Utilities for Microsoft Sentinel☆20Dec 7, 2025Updated 10 months ago
- ☆31Aug 20, 2023Updated 3 years ago
- CABTA (Blue Team Assistant) - AI-Powered SOC Platform for Threat Analysis, IOC Investigation & Email Forensics☆81Jul 28, 2026Updated 2 months ago
- AI驱动的代码漏洞自动化审计，于业界公开的实现思路汇总、跟踪与分析_By Tr0e☆36Jan 23, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Open source SIEM and SOAR stack for security automation.☆12Jul 10, 2023Updated 3 years ago
- AIDEFEND MCP is a local-first AI Security Defensive Assistant that brings the full AIDEFEND countermeasure library into your environment …☆18Sep 11, 2026Updated last month
- ☆13Feb 25, 2021Updated 5 years ago
- ☆18Jun 18, 2023Updated 3 years ago
- ☆14Jun 4, 2026Updated 4 months ago
- ☆604Updated this week
- Convert Sigma rules to Wazuh rules☆77Sep 13, 2025Updated last year
- Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebo…☆166Sep 25, 2026Updated 3 weeks ago
- FlySecAgent 是面向 AI Agent 的插件式 API 台账与测试记忆服务，通过 Hook 或适配器采集工具执行记录，自动整理接口、参数、测试过程与证据，并将增量记忆反馈给主 Agent。提供可视化工作台，支持接口追踪、测试历史回查与探索关系展示。☆123Oct 4, 2026Updated 2 weeks ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- OpenVScan is a web-based vulnerability scanner that integrates open-source tools with AI to deliver smarter, faster and more reliable pre…☆16Jun 22, 2026Updated 4 months ago
- My stuff regarding Copilot for Security☆13Jan 12, 2026Updated 9 months ago
- LLM-powered security log analyzer: detect threats & anomalies with zero regex — just declare a Pydantic schema. Real-time Telegram alerts…☆67Updated this week
- Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IO…☆158Apr 13, 2026Updated 6 months ago
- IoM defualt mal package☆10Feb 22, 2026Updated 8 months ago
- 🛡️ Master the essentials of SOC/Security Analysis with our 12-day SOC Analyst Prerequisites Learning Path, covering Linux, Windows, netw…☆30Oct 12, 2024Updated 2 years ago
- An open framework for classifying, detecting, and preventing insider threat behaviors.☆40Sep 4, 2026Updated last month
- MCP Server for Wazuh SIEM☆240Dec 12, 2025Updated 10 months ago
- 通过通过jhat解析heapdump文件，从而实现heapdump敏感信息搜索。☆12Feb 7, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- HackTheWeb is a production-ready, AI-powered web application penetration testing tool designed for security professionals and ethical hac…☆40Jul 4, 2026Updated 3 months ago
- SOCFortress CoPilot☆537Updated this week
- A quick reference guide for python script development in DFIR☆18Mar 20, 2024Updated 2 years ago
- How to Register your own AV with Defender☆37Aug 27, 2026Updated last month
- This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu…☆50Jun 7, 2024Updated 2 years ago
- SOC homelab: Elastic SIEM, Suricata IDS, Sysmon, custom detection rules, and IR reports mapped to MITRE ATT&CK. Built on two consumer nod…☆21Aug 15, 2026Updated 2 months ago
- A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama a…☆33Jul 23, 2026Updated 3 months ago