M507/
AI-SOC-Agent
M507/AI-SOC-AgentConnectors
Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.
48
google/
mcp-security
google/mcp-securityConnectors
MCP servers for Google SecOps, GTI, SOAR, and SCC.
524
kubeshark/kubesharkConnectors
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
12k
gensecaihq/Wazuh-MCP-ServerConnectors
Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
231