beenuar / AiSOC
git clone https://github.com/beenuar/AiSOC.git
v20.1.0 · 2d ago
Self-hostable open-source security operations center that correlates alerts and investigates them with auditable LLM agents, proposing actions for human approval.
Why you might care
Aimed at blue teams wanting an AI-assisted SOC they can run themselves, with no API keys required and a replayable ledger of every agent step. Ships an MCP server for Claude, Cursor and Continue, and maps detections to MITRE ATT&CK; MIT licensed.
+306
stars, 24h · #100
+~1.5k
stars, 7 days · #143
+~6.5k
stars, 30 days · #131
3.3k
★ total · +86% this week
364
forks · 8 open issues
Star history (as recorded here)
LanguagePython
LicenseMIT
Created2026-05-02 (5mo ago)
Last pushtoday
Watchers64
OwnerUser
GitHub topics
agentic-aiai-securityalert-triageblue-teamcybersecuritydetection-engineeringincident-responselanggraphllm-agentsmcpmitre-attackmodel-context-protocolpurple-teamsecurity-operationsself-hostedsiemsoarsocthreat-detectionthreat-intelligence
Links
- GitHub: github.com/beenuar/AiSOC
- Homepage: https://beenuar.github.io/AiSOC/
- Releases · Issues · Hacker News mentions
README
Loading README…
Blurb generated by claude-haiku-5-5 today. Star deltas marked ~ are extrapolated from partial history.