#soar

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

Splunk SOAR SDK - the official tool for Splunk SOAR app development

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

A repository used as a Go module to help out with Shuffle development, and to ensure we reuse code structures everywhere.

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.