AiSOC

Open-source, self-hostable AI SOC that ingests security telemetry, fires a large detection-rule library, groups alerts into incidents and investigates each one with AI agents whose every prompt and tool call is recorded. It proposes response actions for a human to approve, ships an MCP server for Claude, Cursor and Continue, and runs locally with a bundled model and no required API keys.