Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG
☆163Sep 5, 2026Updated last week
Alternatives and similar repositories for AI_SOC
Users that are interested in AI_SOC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)☆1,179Aug 5, 2026Updated last month
- AI 驱动的 SOC 仿真平台☆167Jan 2, 2026Updated 8 months ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆83Aug 12, 2026Updated last month
- 通过多智能体（Multi-Agent）打造的革命性的安全运营解决方案☆289Jul 7, 2025Updated last year
- Flocks is an agentic SecOps platform.☆465Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- If you a security engineer or an aspirant Security professional then Setting up a Wazuh home lab environment is an excellent way for SOC …☆23Mar 27, 2024Updated 2 years ago
- Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident respo…☆48Dec 28, 2025Updated 8 months ago
- ☆15Sep 20, 2025Updated 11 months ago
- 🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat detection and response. 80+…☆199Feb 11, 2026Updated 7 months ago
- flAWS.cloud and flAWS2.cloud Interactive tutorial/CTFs to learn common AWS security mistakes.☆17May 30, 2022Updated 4 years ago
- This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges☆18Nov 5, 2023Updated 2 years ago
- AI驱动的代码漏洞自动化审计，于 业界公开的实现思路汇总、跟踪与分析_By Tr0e☆36Jan 23, 2026Updated 7 months ago
- Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PC…☆232Updated this week
- Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆296Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆13Feb 25, 2021Updated 5 years ago
- Jupyter Notebooks for Digital Forensics & Incident Response☆10Nov 23, 2021Updated 4 years ago
- AIDEFEND MCP is a local-first AI Security Defensive Assistant that brings the full AIDEFEND countermeasure library into your environment …☆18Updated this week
- A repository dedicated to deliver a comprehensive set of tools for integration and convenient use of Kaspersky Threat Intelligence servic…☆25May 20, 2026Updated 3 months ago
- introduction to distributed scanning using vultr☆11Apr 29, 2017Updated 9 years ago
- ☆15Jun 4, 2026Updated 3 months ago
- ☆590Updated this week
- 针对企业钓鱼软件攻击模拟☆23Nov 30, 2023Updated 2 years ago
- The application consists of several vulnerable web applications that are integrated with Wazuh.☆22May 1, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- My stuff regarding Copilot for Security☆13Jan 12, 2026Updated 8 months ago
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- IoM defualt mal package☆10Feb 22, 2026Updated 6 months ago
- LLM-powered security log analyzer: detect threats & anomalies with zero regex — just declare a Pydantic schema. Real-time Telegram alerts…☆64Sep 1, 2026Updated last week
- MCP Server for Wazuh SIEM☆235Dec 12, 2025Updated 9 months ago
- ☆28Aug 20, 2023Updated 3 years ago
- Deploying of infrastructure and technologies for a SOC as a Service ( SOCasS)☆15Apr 10, 2020Updated 6 years ago
- A quick reference guide for python script development in DFIR☆18Mar 20, 2024Updated 2 years ago
- SOCFortress CoPilot☆522Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An open framework for classifying, detecting, and preventing insider threat behaviors.☆39Sep 4, 2026Updated last week
- Repo to hold wazuh manager mcp server☆92Apr 15, 2026Updated 4 months ago
- This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu…☆49Jun 7, 2024Updated 2 years ago
- Sky-meter is an endpoint checker. It can be deployed as a container, it give you the ability to monitor your internal-cluster APIs☆33Dec 5, 2025Updated 9 months ago
- HackTheWeb is a production-ready, AI-powered web application penetration testing tool designed for security professionals and ethical hac…☆38Jul 4, 2026Updated 2 months ago
- A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama a…☆34Jul 23, 2026Updated last month
- GreenLogAudit is a simple, modern log auditing system that is very quick to deploy and can even be run from a USB drive. It can be run by…☆25May 26, 2026Updated 3 months ago