—
wazuh/wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
GPL-2.0Jul 17, 2026 · metrics 2.10.0
All tags
Catalogue tag
#incident-response
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
31 records
npm · Go
OneUptime/oneuptime
Complete open-source monitoring and observability platform.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Go
kubeshark/kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
jordigilh/kubernaut
An AIOps platform that closes the loop from Kubernetes alert to automated remediation: An AI Agent investigates via MCP tools, selects a fix from a pre-seeded workflow catalog and delegates execution (K8s Job, Tekton, Ansible) — or escalates with a full RCA. Approval gates, OPA policies, and audit trails keep humans in control.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Go · npm
rootlyhq/terraform-provider-rootly
Terraform provider for Rootly - manage incident management, on-call schedules, workflows, and alerts as code
MPL-2.0Jul 17, 2026 · metrics 2.10.0
Go · npm
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
MITSep 5, 2026 · metrics 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.0Jul 30, 2026 · metrics 2.10.0
PyPI
squid-protocol/gitgalaxy
Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.
Custom licenseAug 22, 2026 · metrics 2.10.0
Go
incident-io/catalog-importer
Import data into the incident.io Catalog from a variety of sources.
MITJul 20, 2026 · metrics 2.10.0
crates.io
Karib0u/rustinel
Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Custom licenseAug 4, 2026 · metrics 2.10.0
crates.io
SecurityRonin/forensicnomicon
DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
ThoTischner/observability-mcp
Unified observability gateway for AI agents — one MCP server for Prometheus, Loki, and any backend, with cross-signal anomaly detection and a built-in Web UI.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go · npm
ongridio/ongrid
An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.
AGPL-3.0Jul 19, 2026 · metrics 2.10.0
PyPI
BeyondTrust/bedrock-keys-security
Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
mentat-is/gulp
g(ULP) core backend and plugins
Custom licenseJul 17, 2026 · metrics 2.10.0
Go
Smana/runlore
The self-improving SRE agent
Apache-2.0Jul 15, 2026 · metrics 2.10.0
Go
iLert/terraform-provider-ilert
ilert's Terraform provider
Custom licenseAug 19, 2026 · metrics 2.10.0
crates.io
SecurityRonin/forensic-vfs
Read-only forensic VFS contracts composing evidence into one positioned-read byte edge — ArchiveOpen · ContainerOpen · VolumeSystemOpen · EncryptionOpen · FileSystemOpen — with recursive PathSpec locators. The contract crate every fleet reader implements.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
hrodrig/groot
GROOT — Kubernetes cluster diagnostics CLI Collect nodes, events, pod logs, describes and more with one command. Fast, parallel, configurable, and outputs a clean .tar.gz archive. Perfect for incident response and troubleshooting.
MITJul 17, 2026 · metrics 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go
optimuslabs-io/grokpatrol
Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.
Apache-2.0Jul 18, 2026 · metrics 2.10.0
npm
TanKimGwan/linmas
Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
Custom licenseJul 29, 2026 · metrics 2.10.0
Go
puck-security/geiger
Detection tells you a key is real; geiger tells you whether it's dangerous.
MITJul 28, 2026 · metrics 2.10.0
npm
sifxprime/kodelyth-ecc
70 agents · 194 skills · 97 commands · 22+ hooks · semantic intent routing · self-learning memory · MCP server. Claude Code, Windsurf, Cursor, Codex, Antigravity, Cline, Roo Code, Aider, Kimi, Gemini CLI. MIT.
MITJul 24, 2026 · metrics 2.10.0
—
GoldenWing-360/claude-security-skills
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.
MITAug 4, 2026 · metrics 2.10.0
crates.io
SecurityRonin/state-history-forensic
State-history forensic vocabulary — zero-dependency [H] KNOWLEDGE-tier types and traits lifting each forensic navigation primitive to a time-indexed variant. No deps, no I/O.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
sass-maker/app-health
Owner-first application health and fix handoff for live apps
No licenseAug 3, 2026 · metrics 2.10.0
PyPI
osintph/falconeye
Free self-hosted OSINT investigator's toolkit. Twelve tools in one: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, Google dork generator, script deobfuscator. AGPL-3.0.
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
—
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
No licenseAug 4, 2026 · metrics 2.10.0