AiSOC
AiSOC is a self-hosted security operations center that triages security alerts with AI agents for security teams.
What it is good for
- Triaging security alerts from many tools in one place
- Investigating suspected threats with auditable AI steps
- Approving automated responses before they run
- Connecting an AI assistant like Claude to security data
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- Claude, Cursor, Continue, Splunk, Microsoft Sentinel, Elastic
Momentum
- Rank this week
- #25
- Best rank
- #25 week 44, 2026
- Stars gained last week
- +2,695
- GitHub stars
- 6,502
GitHub numbers as of Nov 2, 2026. Updated weekly.
Ranking history
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is AiSOC free?
- Yes. It is free and open source (MIT license).
- Do I need to know how to code to use AiSOC?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does AiSOC work with?
- According to its own documentation, it works with Claude, Cursor, Continue, Splunk, Microsoft Sentinel, and Elastic.
- What is AiSOC good for?
- Triaging security alerts from many tools in one place, investigating suspected threats with auditable AI steps, approving automated responses before they run, and connecting an AI assistant like Claude to security data.
Similar agents
- daily_stock_analysis
daily_stock_analysis is an agent app that runs daily AI analysis of stocks and sends decision dashboards to chat apps for individual investors.
- Maxun
Maxun is a web data platform that turns any website into a structured API for teams that need scraped data without writing code.
- QuantDinger
QuantDinger is a self-hosted AI trading platform that turns trading ideas into Python strategies, backtests, and paper or live trades for traders.
- Horizon
Horizon is a self-run news radar that collects articles from many sources and writes daily briefings in English and Chinese for people who want to keep up without endless scrolling.
- Yuxi
Yuxi is a self-hosted platform that gives teams a private knowledge-base assistant with custom agents, document search, and access controls for multiple users.
- gemini-notebook-mcp-cli
Gemini Notebook CLI and MCP server is a command-line tool and connector that lets you manage Gemini Notebook from a terminal or AI assistant.