CLUSTER SECURITY-OPERATIONS-AUTOMATES · 24 ENTRIES · EARLIEST ENTRY 2026-09-29

SOC orchestration platforms

This cluster comprises platforms that orchestrate security operations center workflows, including task automation, asset and role management, audit logging, reconnaissance tool automation, and adaptive investigation workflows. The cluster's dated history is too thin to read a shape from, as only 4 dated entries exist before the index started — too few to identify a trend; the cluster predates the index or many members are undated. Traction leaders are CyberGuard (46 stars), followed by log-analysis-ids (2 stars) and switchtender (1 star).

Entry timeline

ENTRY TIMELINE

MAY 2019: 1APR 2024: 1FEB 2026: 1MAY 2026: 1JUL 2026: 1AUG 2026: 4SEP 2026: 11OCT 2026: 4
MAY 2019OCT 2026

Members by activity

Activity signals, not revenue.

Build origin · 1 ai-built · 1 hand-coded · 18 unlabelled

Operator · 6 hobby · 2 commercial · 1 enterprise · 11 unlabelled

Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 20 listed below. Unlabelled means nothing has decided yet — not that the answer is small.

  1. 01ai-security-tool408★13 daysliveCross-platform security terminal that scans systems for vulnerabilities and supply-chain risks, supports remote connections, and automates workflows with AI agents.
  2. 02CyberGuard46★24 days—Autonomous security operations team that coordinates agents for alert fusion, threat hunting, incident response, and human-approved execution.
  3. 03log-analysis-ids2★13 days—Security system that analyzes logs and detects intrusions using MITRE ATT&CK techniques for SOC teams.
  4. 04insider_threat_simulator1★1 day—hobbyAI security operations platform that detects insider threats and file system anomalies and visualizes risk scores and alerts in a dashboard.
  5. 05switchtender1★11 dayslivecommercialWeb-based operations console that runs infrastructure automation scripts across servers with approval workflows and auditable logs.
  6. 06Kestrel0★5 days—Security operations platform that orchestrates tasks, manages assets and roles, logs audits, and automates reconnaissance tools.
  7. 07smart-supply-chain-cyber-digital-twin0★25 days—hobbyDigital twin platform that monitors supply chain infrastructure, detects cyber anomalies, and automates incident triage for security teams.
  8. 08hookstack0★4 days—hand-codedhobbyOperations platform that converts alerts and webhooks into verified agent tasks with budget limits and audit trails for SRE teams.
  9. 09CheckMayo0★3 daysliveSecurity orchestration platform that coordinates vulnerability scanners, centralizes private findings, and automates triage policies for security teams.
  10. 10adaptive-soc-investigator0★13 daysliveApplication that guides security operations center analysts through adaptive investigation workflows.
  11. 11AERIES0★7 days—Secure role-based web platform for air operations command, resource logistics, and simulation decision support.
  12. 12mini-soar0★14 days—hobbySecurity operations platform that generates synthetic Windows events, detects suspicious behavior, enriches alerts with threat intelligence, and provides an analyst triage queue.
  13. 13taurus0★26 dayslivecommercialOperations management platform that inventories remote hosts, automates deployments and jobs, monitors system health, and provides secure access for operations teams.
  14. 14sentinel-ai0★15 days—hobbySecurity operations platform that analyzes security logs, detects brute-force and authentication attacks, correlates alerts into incidents, and generates AI-assisted investigation recommendations.
  15. 15SIH-DECODE0★1 mo—hobbyAutonomous security operations center that detects threats, predicts risks, and generates response recommendations with human approval.
  16. 16ai-soc-defend0★1 moliveSecurity operations tool that monitors and defends against cyber threats.
  17. 17CyberGuardAI4★3 moliveAI-powered security operations platform that ingests logs, detects anomalies, and generates threat alerts for security teams.
  18. 18SC SaaS Operation0★2 moliveenterpriseUnified security operations app that lets operators monitor and control multiple security systems from a single interface.
  19. 19soc-assistant0★2 mo—Simulated SOC investigation tool that automatically processes security alerts through a 7-stage pipeline and presents results on a live dashboard.
  20. 20Security-Automation-Platform-SOAR-Inspired-1★4 moliveai-builtSOC automation platform for security analysts to monitor alerts, manage incidents, and run playbooks.