beenuar/AiSOC

★7,183PythonMIT⑂ 737Issue 3Updated Nov 11, 2026

View on GitHub ↗Website ↗

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

A self-hostable SOC that lets AI agents triage alerts, auditably — AiSOC fuses alerts from your security tools, correlates them against 2,530 executable rules from a 7,015-rule library, and lets AI agents investigate each incident with every prompt and tool call logged for replay. It runs self-hosted with no API keys required, ships an MCP server for Claude, Cursor and Continue, and keeps a human approving any action before it reaches a vendor.

Metrics

Retention can be computed 30 days after a repository first trends (it isn't shown until then). See About for how each metric is defined.

Star growth and Trending appearances (last 30 days)

Created May 2, 2026 · First on trending Oct 30, 2026

Other notable repositories in the same category (Security)

• finic-ai/kairosOpen-source fraud decisioning that your coding agent tunes via MCP
• Gramli/Gramli.FrameworkA Blog-Driven Playground Testing How Shopping Agents Get Manipulated
• nishant-Tiwari24/veilAn Electron-based Tor browser rebuilt by reverse-engineering the original
• sherlock-project/sherlockTrack a username's footprint across hundreds of social sites
• chris124567/cfsolveHeadless-browser-free Cloudflare Turnstile and challenge solving in Rust

See all Security repositories →

Rank within agentic-ai

See all agentic-ai repositories →