agentic-soc-platform
View on GitHubAgentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)
An open-source agentic security operations platform for alert triage, incident investigation, threat-intelligence enrichment, and SOAR playbooks. Integrates SIEM sources such as Splunk and ELK, supports private deployment, and exposes SOC capabilities to coding agents through a CLI and plugins.
Use Cases
Triage and correlate security alerts into casesInvestigate incidents and generate structured reportsEnrich IOCs with threat intelligence and asset contextSearch Splunk and ELK logsOrchestrate AI investigations and response actions with playbooksExtract reusable knowledge from closed casesEnable coding agents to interact with SOC cases and security data
Built With
- Language
- Python
- Frameworks
- Dify · LangChain · LangGraph
Tags
agentic SOC · cybersecurity · security operations · threat detection · incident response · SIEM · SOAR · alert triage · threat intelligence · playbooks · private deployment