An open source AI-native agentic SOC platform

A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.

🛡️ The only Open-Source RLM Memory Server with Mathematically Proven Safety. Persistent context, MCP tools & Sentinel Lattice protection for autonomous AI agents.

Scan your infrastructure for quantum-vulnerable cryptography. Get a migration roadmap. NIST FIPS 203/204 compliant.

AI SOC Security Threat analysis using MCP Server

Rust stream processing engine for real-time detection. Open-source Apache Flink alternative built for detection engineering, fraud prevention, and MITRE ATT&CK coverage. 1.5M events/sec, single 15MB binary, no JVM.

Sovereign AI SOC: local-first AI security operations with Wazuh, Suricata, correlation-first incidents, case management and human-in-the-loop AI.

Parameter-free lossless compression and retrieval for sparse high-dimensional vectors, on commodity CPUs (DRF codec).

Our reusable, modifiable prompts and simple agents that are included within the Arcanna platform and invokable via Arcanna's AI Assistant

Built a Full-Cycle Security Operations Pipeline around a T-Pot honeypot deployment on AWS, with tailscale-enabled local Splunk SIEM log ingestion, AI-powered log analysis and intelligence (Claude + VirusTotal MCPs), incident tracking via DFIR IRIS and Slack, Ollama-based alert triage, and automated response via OPNsense Firewall Rules

AgenticAnomaly is an indirect prompt injection CTF for testing how agentic security operations center (SOC) workflows can be exploited through indirect prompt injection.

a repo of all the assets PMM maintains with messaging updates defined

Research for security teams whose alert volume has outrun the SOC and who are deciding how to scale operations: add people, or add AI agents that triage and investigate at machine speed with humans in control.

AuraSpear is an end-to-end AI SOC / SIEM / SOAR / threat-intelligence platform. It brings alerts, cases, incidents, hunts, intel enrichment, detection engineering, connectors, and AI reasoning into one multi-tenant, RBAC-governed workspace — with AI woven through investigation, not bolted on.

Torq APIs.json profile

Roadmap for AI based SOC Setup plan

面向 SOC 新人的系统化学习指南 + AI 原生 SOC 行业观察（VitePress 站点）