cyberstars / tools / vigil-soc
Vigil SOC
—Agentic open-source AI SOC with human-on-the-loop control.
Open-source, agentic AI security operations center released under Apache 2.0, with specialist agents for triage, investigation, threat hunting, correlation, response, forensics and ATT&CK mapping. Workflows are plain-text Markdown files and integrations use MCP, so it runs from a local clone with Docker and any supported LLM provider, including a local model. Response actions are proposed as approval requests that wait for a human analyst.