ai-soc

An open source AI-native agentic SOC platform

Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.

Evidence-driven autonomous SOC team on AgentTeams: hash-bound approvals, HMAC audit chain, rollback and reproducible attack scenarios — auditable governance primitives for agent infrastructure.

A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.

🛡️ The only Open-Source RLM Memory Server with Mathematically Proven Safety. Persistent context, MCP tools & Sentinel Lattice protection for autonomous AI agents.

Scan your infrastructure for quantum-vulnerable cryptography. Get a migration roadmap. Maps findings to NIST FIPS 203/204.

AI SOC Security Threat analysis using MCP Server

Sovereign AI SOC: local-first AI security operations with Wazuh, Suricata, correlation-first incidents, case management and human-in-the-loop AI.

Built a Full-Cycle Security Operations Pipeline around a T-Pot honeypot deployment on AWS, with tailscale-enabled local Splunk SIEM log ingestion, AI-powered log analysis and intelligence (Claude + VirusTotal MCPs), incident tracking via DFIR IRIS and Slack, Ollama-based alert triage, and automated response via OPNsense Firewall Rules

Parameter-free lossless compression and retrieval for sparse high-dimensional vectors, on commodity CPUs (DRF codec).

Our reusable, modifiable prompts and simple agents that are included within the Arcanna platform and invokable via Arcanna's AI Assistant

Research for security teams whose alert volume has outrun the SOC and who are deciding how to scale operations: add people, or add AI agents that triage and investigate at machine speed with humans in control.

AgenticAnomaly is an indirect prompt injection CTF for testing how agentic security operations center (SOC) workflows can be exploited through indirect prompt injection.

Vigil - an ever improving 100% OpenSource AI system for security

a repo of all the assets PMM maintains with messaging updates defined

Deterministic context enrichment, historical telemetry correlation, RAG intelligence, and MITRE ATT&CK mapping for the INFILTRIX Autonomous AI Cyber Defense Platform

Autonomous AI SOC Analyst Platform with sub-second threat investigation, zero-trust LLM reasoning (Groq LLaMA 3.3 70B), MITRE ATT&CK correlation, and immudb cryptographic audit integrity.

OwlSOC — AI SOC that investigates every alert from Microsoft Sentinel, Defender and AWS Security Hub. Marketing site source.

AuraSpear is an end-to-end AI SOC / SIEM / SOAR / threat-intelligence platform. It brings alerts, cases, incidents, hunts, intel enrichment, detection engineering, connectors, and AI reasoning into one multi-tenant, RBAC-governed workspace — with AI woven through investigation, not bolted on.