Havuz

AiSOC, güvenlik telemetrisini birleştirip tehditleri tespit eden ve AI agent ile incelerken karar adımlarını kayda alan, self-hosted bir SOC platformudur.

Neden yükseliyor · 149 günlük yaşına rağmen 2.370 yıldız ve son 28 günde 247 commit dikkat çekiyor; self-hosted kurulum, yerel modelle API key gerektirmeyen başlangıç ve çalışır demo akışı projeyi denemeyi kolaylaştırıyor. Commit sayısı yüksek olsa da katkı 3 farklı yazarla sınırlı; yükselişin nedenini doğrudan doğrulayacak benimsenme verisi yok.

Open-source Telegram chat exporter, deleted & edited message logger, and OSINT forensics archiver. Save chat history, capture deleted messag

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains,

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small

Learn platform engineering by breaking and fixing real Kubernetes clusters.

Ongrid, altyapı gözlemlenebilirliği ve operasyon araçlarını chat kanalları üzerinden kullanılabilen bir ops AI Agent içinde birleştiriyor.

Neden yükseliyor · 127 günde 1078 yıldız almış olması ve son 28 günde 69 commit ile 8 farklı yazarın katkısı dikkat çekiyor; bu, yalnızca tek kişinin yürüttüğü durağan bir repo olmadığını gösteren olumlu bir aktivite sinyali. Ops AI Agent ve incident response alanlarına ilgi de görünürlüğüne katkıda bulunmuş olabilir; ancak README ve bu ölçümler yükselişin nedenini veya gerçek kullanıcı benimsemesini kanıtlamıyor.

An open‑source technical wiki connected to the systems it describes

Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.

Agentic DFIR

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process with

CyberGuard, AI agent’larla güvenlik soruşturmalarını yürütmek ve müdahale kararlarını onay, denetim izi ve sonuç kontrolleriyle yönetmek için bir SOC uygulaması sunuyor.

Neden yükseliyor · 10 günlük bir repoda 54 yıldız ve son 28 günde 58 commit bulunması erken ilgi ve yoğun geliştirme sinyali veriyor. Ancak farklı yazar sayısının 1 olması, bu hareketliliğin topluluk katkısı veya bağımsız benimsemeyle desteklendiğini göstermiyor.

Open-source self-hosted on-call scheduling, alert routing, escalation, and incident response platform for SRE and DevOps teams.

Next-gen AI-native server ops panel with an in-workspace SRE agent. Crash self-healing, safe rollbacks, Docker/game servers, and local Ollam

Open-source tools for AWS DevOps Agent - extend DevOps Agent with ready-to-use skills, custom agents, and other tools, for incident response

Self-hosted AI SRE for Kubernetes — zero-instrumentation eBPF observability plus a copilot that fixes issues through guardrailed, self-verif

Turn a production incident into a structured 9-section LLM response (severity, root cause, mitigation, postmortem). Ships with a 5-scenario

Local-first, explainable log incident diagnosis for developers and CI/CD.

An AI troubleshooting workbench for internal systems: it integrates ticketing and alerting systems via HTTP APIs and webhooks, connects code

Android uptime monitoring with no server and no account. Checks run on your phone; an outage arrives as a full-screen page with a looping al

Uptime monitoring, public status pages and on-call in one. Checks as often as every 30 seconds from multiple regions, 8 check types includin

Open-source platform for always-on AI agents: a software factory for Claude Code that takes your projects from tickets to merged pull reques

Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, B

Evidence-driven production readiness checklist for shipping web applications with confidence

A Kubernetes lab that reproduces real production incidents on a live, instrumented microservice stack — for testing root-cause-analysis tool

基于Agent驱动的网络安全流量监控与分析平台，下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成，为护网行动增添一把利器。

Self-hostable incident-investigation agents for Sentry, Datadog, and Slack.

Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware —

Lightweight Rust intrusion-signal monitor for Linux VPS hosts with alerts, active response, baselines, and a fleet panel.

A swarm of forensic agents, on your machine, on the record. Open-source agentic digital forensics and incident response under the AGPL: agen

Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommendatio

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill

GROOT — Kubernetes cluster diagnostics CLI Collect nodes, events, pod logs, describes and more with one command. Fast, parallel, configura

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

Defensive research and practical examples for DDoS detection, mitigation, and resilient web architecture.

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

Open-source, self-hosted AI-assisted operations for Kubernetes and Linux. Start here for source, architecture, deployment, and contributions

A Collection of Defensive Cyber Security skills designed to harden your Software, Infrastructure and even Game.

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

BlackBox, Grand Prize winner of the Build with DataHub Agent Hackathon 2026. Autonomous data incident response with an evidence gate, verifi

Pre-production checklists for solo founders. 4,685 items, 88% portable to any stack, 26 stack supplements — plus AI/agent security and the b

AI-assisted rescue boot USB — a Ventoy multi-boot drive on Ubuntu 24.04 with offline LLM inference (Ollama + llama.cpp), pre-installed agent

Free self-hosted OSINT investigator's toolkit with an MCP server for Claude Code and Claude Desktop. 19 tools in one interface: crypto traci

Open-source control plane for governed ModelOps — fine-tune, evaluate, promote, and serve models as cost-capped, policy-gated, audited comma

Self-hosted on-call scheduling, alert routing and escalation on Go. Telegram, Slack, email and Asterisk integration

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

PostgreSQL monitoring and incident investigation

Agent Emergency Protocol Incident Codes: a vendor-neutral runtime incident-code language for autonomous AI agents. Created by Mitthan Meena.

VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifiable verdict. SANS Find Evil! 2026.

Open-source incident triage: Datadog errors to Claude RCA, GitHub issues, and reviewable fix PRs