CLUSTER SECURITY-OPERATIONS-AUTOMATES · 24 ENTRIES · EARLIEST ENTRY 2026-09-29
SOC orchestration platforms
This cluster comprises platforms that orchestrate security operations center workflows, including task automation, asset and role management, audit logging, reconnaissance tool automation, and adaptive investigation workflows. The cluster's dated history is too thin to read a shape from, as only 4 dated entries exist before the index started — too few to identify a trend; the cluster predates the index or many members are undated. Traction leaders are CyberGuard (46 stars), followed by log-analysis-ids (2 stars) and switchtender (1 star).
Entry timeline
ENTRY TIMELINE
Each bar is the month a member carries, which is a creation date where the source published one and a crawl date otherwise. Nothing in the index was found before 11 August 2026, and coverage broadened sharply on 14–15 August, so a bar from then on reports how much we found that month, not how much was built; an earlier bar reports how far back a member's own source dated it — not how long we have been watching.
Members by activity
Activity signals, not revenue.
Build origin · 1 ai-built · 1 hand-coded · 18 unlabelled
Operator · 6 hobby · 2 commercial · 1 enterprise · 11 unlabelled
Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 20 listed below. Unlabelled means nothing has decided yet — not that the answer is small.
- 01ai-security-tool408★13 daysliveCross-platform security terminal that scans systems for vulnerabilities and supply-chain risks, supports remote connections, and automates workflows with AI agents.
- 02CyberGuard46★24 days—Autonomous security operations team that coordinates agents for alert fusion, threat hunting, incident response, and human-approved execution.
- 03log-analysis-ids2★13 days—Security system that analyzes logs and detects intrusions using MITRE ATT&CK techniques for SOC teams.
- 04insider_threat_simulator1★1 day—hobbyAI security operations platform that detects insider threats and file system anomalies and visualizes risk scores and alerts in a dashboard.
- 05switchtender1★11 dayslivecommercialWeb-based operations console that runs infrastructure automation scripts across servers with approval workflows and auditable logs.
- 06Kestrel0★5 days—Security operations platform that orchestrates tasks, manages assets and roles, logs audits, and automates reconnaissance tools.
- 07smart-supply-chain-cyber-digital-twin0★25 days—hobbyDigital twin platform that monitors supply chain infrastructure, detects cyber anomalies, and automates incident triage for security teams.
- 08hookstack0★4 days—hand-codedhobbyOperations platform that converts alerts and webhooks into verified agent tasks with budget limits and audit trails for SRE teams.
- 09CheckMayo0★3 daysliveSecurity orchestration platform that coordinates vulnerability scanners, centralizes private findings, and automates triage policies for security teams.
- 10adaptive-soc-investigator0★13 daysliveApplication that guides security operations center analysts through adaptive investigation workflows.
- 11AERIES0★7 days—Secure role-based web platform for air operations command, resource logistics, and simulation decision support.
- 12mini-soar0★14 days—hobbySecurity operations platform that generates synthetic Windows events, detects suspicious behavior, enriches alerts with threat intelligence, and provides an analyst triage queue.
- 13taurus0★26 dayslivecommercialOperations management platform that inventories remote hosts, automates deployments and jobs, monitors system health, and provides secure access for operations teams.
- 14sentinel-ai0★15 days—hobbySecurity operations platform that analyzes security logs, detects brute-force and authentication attacks, correlates alerts into incidents, and generates AI-assisted investigation recommendations.
- 15SIH-DECODE0★1 mo—hobbyAutonomous security operations center that detects threats, predicts risks, and generates response recommendations with human approval.
- 16ai-soc-defend0★1 moliveSecurity operations tool that monitors and defends against cyber threats.
- 17CyberGuardAI4★3 moliveAI-powered security operations platform that ingests logs, detects anomalies, and generates threat alerts for security teams.
- 18SC SaaS Operation0★2 moliveenterpriseUnified security operations app that lets operators monitor and control multiple security systems from a single interface.
- 19soc-assistant0★2 mo—Simulated SOC investigation tool that automatically processes security alerts through a 7-stage pipeline and presents results on a live dashboard.
- 20Security-Automation-Platform-SOAR-Inspired-1★4 moliveai-builtSOC automation platform for security analysts to monitor alerts, manage incidents, and run playbooks.
Ranked by traction, highest first, and paged 20 at a time — this is a window on the cluster, never the whole of it. Ties are broken by a stable id so a product cannot appear on two pages or fall between them. Browse every cluster.