- Home
- AI SOC Agents
- AiSOC
On the recordRead 14 Nov 202614 facts
AiSOC
Plans and prices
Self-host
Free
Self-hosted
Read 14 Nov 2026 · github.com
On the record
- Compliance
- The console provides evidence for SOC 2, ISO 27001, NIST CSF, PCI-DSS, HIPAA, and DORA.github.com · read 14 Nov 2026
- Connectors
- Its catalog includes 26 connectors across security, SIEM, cloud, identity, SaaS, VCS, and network products.github.com · read 14 Nov 2026
- Core workflow
- It ingests security events, correlates them, runs AI-driven investigation, and presents results in a SOC console.github.com · read 14 Nov 2026
- Credential handling
- The connector setup encrypts secrets using CredentialVault with Fernet AES-128-CBC and HMAC-SHA256.github.com · read 14 Nov 2026
- Detection engineering
- Detection-as-Code supports proposal, review, evaluation gating, and promotion of detection rules.github.com · read 14 Nov 2026
- Federated search
- A single query can be fanned out to Splunk, Microsoft Sentinel, and Elastic using native query dialects.github.com · read 14 Nov 2026
- Governance
- Governance features listed include SAML/OIDC SSO, tenant-isolated Postgres RLS, granular RBAC, and immutable audit logging.github.com · read 14 Nov 2026
- Investigation audit
- The Investigation Ledger records prompts, responses, cited evidence, and tool calls for replay.github.com · read 14 Nov 2026
- MCP integration
- An MCP server lets analysts query alerts, run investigations, and replay agent decision steps from supported IDEs or chat.github.com · read 14 Nov 2026
- Notable hosting limitation
- The project notes that its public demo may go offline because it runs locally on a maintainer's computer.github.com · read 14 Nov 2026
- Privacy
- The project states it runs on the user's infrastructure without vendor-cloud callbacks or data exfiltration for model improvement.github.com · read 14 Nov 2026
- Product
- AiSOC is an open-source, self-hostable AI security operations center.github.com · read 14 Nov 2026
- Support and security reporting
- For security issues, the project directs reporters to GitHub private vulnerability reporting rather than public issues.github.com · read 14 Nov 2026
- Supported deployment
- Deployment configurations are listed for Fly.io, Render, Railway, Coolify, Kubernetes/Helm, and AWS/Terraform.github.com · read 14 Nov 2026