AiSOC

What it does

Compliance

The console provides evidence for SOC 2, ISO 27001, NIST CSF, PCI-DSS, HIPAA, and DORA.checked 14 Nov 2026

Connectors

Its catalog includes 26 connectors across security, SIEM, cloud, identity, SaaS, VCS, and network products.checked 14 Nov 2026

Core workflow

It ingests security events, correlates them, runs AI-driven investigation, and presents results in a SOC console.checked 14 Nov 2026

Credential handling

The connector setup encrypts secrets using CredentialVault with Fernet AES-128-CBC and HMAC-SHA256.checked 14 Nov 2026

Detection engineering

Detection-as-Code supports proposal, review, evaluation gating, and promotion of detection rules.checked 14 Nov 2026

Federated search

A single query can be fanned out to Splunk, Microsoft Sentinel, and Elastic using native query dialects.checked 14 Nov 2026

Governance

Governance features listed include SAML/OIDC SSO, tenant-isolated Postgres RLS, granular RBAC, and immutable audit logging.checked 14 Nov 2026

Investigation audit

The Investigation Ledger records prompts, responses, cited evidence, and tool calls for replay.checked 14 Nov 2026

MCP integration

An MCP server lets analysts query alerts, run investigations, and replay agent decision steps from supported IDEs or chat.checked 14 Nov 2026

Notable hosting limitation

The project notes that its public demo may go offline because it runs locally on a maintainer's computer.checked 14 Nov 2026

Privacy

The project states it runs on the user's infrastructure without vendor-cloud callbacks or data exfiltration for model improvement.checked 14 Nov 2026

Product

AiSOC is an open-source, self-hostable AI security operations center.checked 14 Nov 2026

Support and security reporting

For security issues, the project directs reporters to GitHub private vulnerability reporting rather than public issues.checked 14 Nov 2026

Supported deployment

Deployment configurations are listed for Fly.io, Render, Railway, Coolify, Kubernetes/Helm, and AWS/Terraform.checked 14 Nov 2026