🔥
HotRepo
AiSOC — Self-host Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE
📦
beenuar

AiSOC — Self-host Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

⭐ 5.6k🍴 574Python📜 mit🐳 Docker Compose#agentic-ai#ai-security#alert-triage#blue-team

AiSOC

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

⭐ 4,396 stars on GitHub · 🍴 460 forks · 📜 License: mit · 💻 Language: Python

What is AiSOC?

A standout opensource self-host project on GitHub — host on your own server for full control over your data and costs.

The biggest strength is active opensource community — fast bug fixes, regular features, no abandonment risk.

Best for self-host enthusiasts wanting to try a strong-community opensource project.

Topics: the project is tagged with popular topics:

  • 🏷️ agentic-ai
  • 🏷️ ai-security
  • 🏷️ alert-triage
  • 🏷️ blue-team
  • 🏷️ cybersecurity
  • 🏷️ detection-engineering
  • 🏷️ incident-response
  • 🏷️ langgraph
  • 🏷️ llm-agents
  • 🏷️ mcp

📸 Screenshots

AiSOC on one host: make up brings the stack up and prints the sign-in address, the console shows real CISA KEV rows, a pushed event becomes an alert, and the cost dashboard reports the tokens triage spent

Alerts queue

AI triage verdict in the Investigation Rail

Threat intelligence page showing CISA KEV entries

SOC operations dashboard with honest empty states

Quick install

The project supports Docker Compose:

git clone https://github.com/beenuar/AiSOC.git
cd AiSOC
docker compose up -d

Check the README in the repo for required env variables.

Minimum system requirements

Component Recommended
RAM 2048 MB
CPU 2 vCPU
Disk 25 GB SSD
OS Ubuntu 22.04 LTS / Debian 12
Docker 24.0+

⚡ Deploy fast on VSIS

Use the VSIS VPS Lite 2GB RAM / 2 vCPU / 25GB SSD (~104k/tháng) plan from VSIS.NET — high-speed VN-based VPS, 24/7 support, ideal for running AiSOC smoothly.

🎯 Benefits:

  • One-command docker compose up -d deploy in 2 minutes
  • Dedicated IPv4, root access, unmetered domestic bandwidth
  • Daily snapshot backup
  • Free install assistance from the VSIS team

👉 See matching VPS plans at vsis.net

Resources


Article compiled from GitHub data on 27/10/2026. Star/fork counts may have changed — see live numbers via the GitHub link.