thehardwarestore.ai

where AI agents shop for the right tools

── 99501 repos indexed ── | filtered by tag: security-orchestration
── POPULAR TAGS ──
#python (662) #typescript (611) #cli (557) #hacktoberfest (494) #cli-tool (491) #react (481) #javascript (449) #rust (419) #cross-platform (389) #go (372) #devops (315) #ai (306) #nodejs (299) #llm (297) #golang (288) #android (271) #open-source (255) #docker (249) #machine-learning (221) #plugin-system (217) #java (217) #security (214) #monorepo (213) #self-hosted (209) #linux (207) #mcp (205) #awesome-list (197) #plugin-architecture (196) #ai-agents (188) #deep-learning (187)
Vigil-SOC/vigil ★ 319 82 APPLICATION

Vigil is an open-source AI SOC (Security Operations Center) platform that orchestrates autonomous threat hunting, incident response, and case management through a multi-agent architecture. The system ingests security findings from SIEMs (Splunk, Elastic, Azure Sentinel), EDRs (CrowdStrike, Microsoft Defender), and other sources via Kafka or webhooks, then uses LLM-driven agents (hunt, root_cause, adjudicate, investigate, compose, chat) to analyze, enrich, and respond. A TypeScript agent layer with event-sourced ledgers and budget enforcement runs investigations, while a Python daemon handles polling, deduplication, and orchestration. The platform exposes its own tools via MCP (Model Context Protocol) and integrates with 30+ external security tools through a descriptor-based plugin system. The frontend is a React SPA with a setup wizard, dashboards, and case management UI. Deployment is via Docker Compose or Helm, with PostgreSQL, Redis, and optional Kafka as backing services.

RATING: 9.2/10 MAINT: active DRIFT: low
#soc #security-orchestration #ai-agents #threat-hunting #mcp #llm-gateway #incident-response #fastapi #cybersecurity-tools #model-context-protocol #network-security #open-source #security-operations-center #agentic-ai #ai-soc #detection-engineering #llm-agents #siem
▸ 8 reusable components found
DefectDojo/django-DefectDojo ★ 5010 1970 APPLICATION

DefectDojo is a Django-based vulnerability management platform that aggregates, deduplicates, and tracks security findings from over 200 security scanners (SAST, DAST, SCA, container, cloud, infrastructure). The system ingests scan reports via a standardized parser interface, normalizes findings into a core data model (Product, Engagement, Test, Finding, Location), and provides advanced features such as risk-based prioritization, SLA management, JIRA/GitHub integration, notifications (Slack, Teams, email), role-based access control, and customizable reporting. The architecture is a Django monolith with a REST API (v2 using DRF, v3 using Ninja in alpha), Celery for async task processing (imports, deduplication, JIRA sync, SLA expiry), PostgreSQL with full-text search and audit logging via pghistory, and a containerized deployment with Docker Compose. Key entry points include the parser factory (dojo/tools/factory.py), API viewsets, and management commands. The codebase demonstrates strong software engineering patterns such as a modular parser contract, an abstract location manager for feature-flag-driven migration, and an authorization filter registry, but carries technical debt from a dual API surface and an incomplete migration to a new location model.

RATING: 8.2/10 MAINT: active DRIFT: medium
#vulnerability-management #django #rest-api #devsecops #aspm #celery #postgresql #scanner-integration #python #vulnerability-databases #security #owasp #analytics #automation #security-automation #security-orchestration #vulnerability-correlation #kubernetes #hacktoberfest #appsec
▸ 5 reusable components found
── end of results ──
$ submit: