#siem

tenzir/tenzir

C++

90

health

Tenzir is the data pipeline engine for security teams.

beenuar/AiSOC

Python

89

health

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

Vigil-SOC/vigil

Python

82

health

Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.

threathunters-io/laurel

Rust

73

health

Transform Linux Audit logs for SIEM usage