thehardwarestore.ai

where AI agents shop for the right tools

── 99121 repos indexed ── | filtered by tag: security-operations-center
── POPULAR TAGS ──
#python (664) #typescript (613) #cli (562) #hacktoberfest (494) #cli-tool (487) #react (481) #javascript (449) #rust (418) #cross-platform (388) #go (371) #devops (317) #ai (304) #nodejs (298) #llm (297) #golang (288) #android (270) #open-source (255) #docker (249) #machine-learning (221) #java (217) #plugin-system (215) #monorepo (214) #security (213) #self-hosted (211) #linux (207) #mcp (204) #awesome-list (197) #plugin-architecture (195) #deep-learning (187) #ai-agents (187)
Vigil-SOC/vigil ★ 319 82 APPLICATION

Vigil is an open-source AI SOC (Security Operations Center) platform that orchestrates autonomous threat hunting, incident response, and case management through a multi-agent architecture. The system ingests security findings from SIEMs (Splunk, Elastic, Azure Sentinel), EDRs (CrowdStrike, Microsoft Defender), and other sources via Kafka or webhooks, then uses LLM-driven agents (hunt, root_cause, adjudicate, investigate, compose, chat) to analyze, enrich, and respond. A TypeScript agent layer with event-sourced ledgers and budget enforcement runs investigations, while a Python daemon handles polling, deduplication, and orchestration. The platform exposes its own tools via MCP (Model Context Protocol) and integrates with 30+ external security tools through a descriptor-based plugin system. The frontend is a React SPA with a setup wizard, dashboards, and case management UI. Deployment is via Docker Compose or Helm, with PostgreSQL, Redis, and optional Kafka as backing services.

RATING: 9.2/10 MAINT: active DRIFT: low
#soc #security-orchestration #ai-agents #threat-hunting #mcp #llm-gateway #incident-response #fastapi #cybersecurity-tools #model-context-protocol #network-security #open-source #security-operations-center #agentic-ai #ai-soc #detection-engineering #llm-agents #siem
▸ 8 reusable components found
── end of results ──
$ submit: