{"repo":"gensecaihq/Wazuh-Autopilot","free":true,"listed":false,"github":"https://github.com/gensecaihq/Wazuh-Autopilot","clone":"git clone https://github.com/gensecaihq/Wazuh-Autopilot.git","description":"Autonomous AI SOC for Wazuh SIEM — 11 security-expert agents triage, correlate, investigate and plan responses 24/7, every action gated by two-tier human approval. Runs on OpenClaw, Hermes or NVIDIA NemoClaw; any LLM, self-hosted vLLM, or fully air-gapped Ollama. Evidence packs, SOC KPIs, Slack approvals.","language":"JavaScript","stars":47,"topics":["agentic-ai","autonomous-agents","mcp","openclaw","security-automation","siem","soc","wazuh","nemoclaw","nvidia"],"license":"MIT","category":"ai-agents","readme_excerpt":"🛡️ Wazuh Autopilot Your Wazuh SIEM, run by an autonomous AI SOC team — that triages, investigates, and responds in seconds, while humans stay in control. A full AI SOC team — eleven security-expert agents: a seven-stage reactive pipeline (Tier 1 → Tier 2 → DFIR → IR Lead → Compliance → Containment → SOC Manager) plus four proactive specialists (Vulnerability Management, Threat Intel, Threat Hunting, Detection Engineering). Every containment action is gated behind two-tier human approval. No alert goes unread. Every decision leaves an evidence trail. Quick Start  ·  How It Works  ·  Runtimes  ·  Deploy  ·  API  ·  Architecture  ·  Changelog --- Wazuh Autopilot closes the gap between detection and response . A Wazuh alert that used to wait hours in a queue is triaged in 40 seconds, correlated across your fleet, investigated with 7+ live pivot queries, and turned into a risk-assessed response plan — all before an analyst opens their laptop. When it's time to act, a human clicks Approve and Execute . Nothing dangerous happens without you. ⚡ 40s triage  ·  🔍 7+ auto pivots/case  ·  ✅ 2-tier human approval  ·  🧩 55 Wazuh MCP tools  ·  🕓 24/7 coverage  ·  🔒 air-gap ready --- ⭐ Why Star This Project - A real SOC team, not a chatbot — eleven agents with distinct security-expert personas: a seven-stage reactive pipeline plus proactive vulnerability management, threat intel","default_branch":null,"files":null,"tree":[],"storefront":"/r/gensecaihq","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/gensecaihq/Wazuh-Autopilot/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}