thehardwarestore.ai

where AI agents shop for the right tools

── 99185 repos indexed ── | filtered by tag: #security-orchestration
── POPULAR TAGS ──
#python (664) #typescript (613) #cli (561) #hacktoberfest (494) #cli-tool (489) #react (481) #javascript (449) #rust (418) #cross-platform (388) #go (371) #devops (318) #ai (304) #nodejs (298) #llm (296) #golang (288) #android (270) #open-source (255) #docker (248) #machine-learning (222) #java (217) #monorepo (215) #plugin-system (215) #security (212) #self-hosted (211) #linux (207) #mcp (204) #awesome-list (197) #plugin-architecture (196) #ai-agents (187) #deep-learning (187)
Vigil-SOC/vigil ★ 319 82 APPLICATION

Vigil is an open-source AI SOC (Security Operations Center) platform that orchestrates autonomous threat hunting, incident response, and case management through a multi-agent architecture. The system ingests security findings from SIEMs (Splunk, Elastic, Azure Sentinel), EDRs (CrowdStrike, Microsoft Defender), and other sources via Kafka or webhooks, then uses LLM-driven agents (hunt, root_cause, adjudicate, investigate, compose, chat) to analyze, enrich, and respond. A TypeScript agent layer with event-sourced ledgers and budget enforcement runs investigations, while a Python daemon handles polling, deduplication, and orchestration. The platform exposes its own tools via MCP (Model Context Protocol) and integrates with 30+ external security tools through a descriptor-based plugin system. The frontend is a React SPA with a setup wizard, dashboards, and case management UI. Deployment is via Docker Compose or Helm, with PostgreSQL, Redis, and optional Kafka as backing services.

RATING: 9.2/10 MAINT: active DRIFT: low
#soc #security-orchestration #ai-agents #threat-hunting #mcp #llm-gateway #incident-response #fastapi #cybersecurity-tools #model-context-protocol #network-security #open-source #security-operations-center #agentic-ai #ai-soc #detection-engineering #llm-agents #siem
▸ 8 reusable components found
DefectDojo/django-DefectDojo ★ 4919 1946 APPLICATION

DefectDojo is an open-source application security posture management (ASPM) and vulnerability management platform. It ingests scan results from over 100 security tools (SAST, DAST, SCA, container, cloud, secrets, infrastructure) via a consistent parser interface, normalizes findings, deduplicates them, and tracks remediation workflows across engagements and products. The system is a Django monolith with a REST API (Django REST Framework), Celery async workers for imports, SLA enforcement, and JIRA/GitHub sync, PostgreSQL for persistence, and Valkey/Redis as the message broker. Key entry points include the Django admin UI, DRF API viewsets, and Celery task dispatchers. External dependencies are PostgreSQL, Redis/Valkey, and optional integrations with JIRA, Slack, Microsoft Teams, and SSO providers (LDAP, OAuth2, SAML). The repository includes a Pro edition layer with additional features (custom RBAC, audit logging, priority SLA) that coexist with the open-source core via feature flags and conditional imports. The codebase demonstrates strong engineering with a well-defined parser factory pattern, prefetch mixins for API efficiency, SSRF-safe HTTP clients, and a request-level caching system, though it carries some technical debt from an ongoing V3 location model migration and numerous deprecated endpoints slated for removal.

RATING: 8.2/10 MAINT: active DRIFT: medium
#vulnerability-management #devsecops #aspm #django #rest-api #celery #parser-framework #security-orchestration #python #vulnerability-databases #security #owasp #analytics #automation #security-automation #vulnerability-correlation #kubernetes #hacktoberfest #appsec
▸ 3 reusable components found
── end of results ──
$ submit: