Cybersecurity toolkits · Rank #33
AiSOC
Grade C: derived only from the two verdicts below. How grades work
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Why this verdict
How we check →- 982 commits by 11 contributors in the last 90 days (906 in the last 30). receipt ↗
- Latest release v19.0.0, 6 days ago. receipt ↗
- Expo 54 declared; latest is 58 (4 majors behind). receipt ↗
- On current major: Next.js, React, Tailwind CSS. receipt ↗
- Not counted in verdict: React Native 0 → 0, TypeScript 6 → 7. receipt ↗
Snapshot: commit 34ca18c on main, checked 2026-10-19 06:17 UTC. Receipts link to files at this exact commit.
- Two or more breaking releases behind on a core dependency.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| Expo expo | 54.0.0 | 58.0.14 | 4 majors behind |
| React Native react-native | 0.81.4 | 0.88.0 | Behind, not counted |
| TypeScript typescript | 6.0.3 | 7.0.2 | Behind, not counted |
| Next.js next | 16.4.0 | 16.4.2 | Current |
| React react | 19.1.0 | 19.3.1 | Current |
| Tailwind CSS tailwindcss | 4.3.3 | 4.3.3 | Current |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Next.js, Expo, React Native, Vite
- Testing
- Vitest, Playwright
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- APIIngest API
posts one real event to the ingest API
- OtherDetection rule library
runs the 2535 executable rules of its 6991-rule library
- OtherThreat intel re-sweep
New threat intelligence re-sweeps the history you already collected
- OtherClick-and-connect connectors
87 click-and-connect data connectors
- OtherCloud log collectors
Four collectors read the surfaces one actually emits to
- OtherSliding-window rules
76 sliding-window rules
- OtherTenant rule tuning
applies your tenant's own tuning on top
- OtherPlaybook preview and approval
A playbook triggered by an alert previews before it acts
- OtherSigned evidence bundles
any investigation exports as a signed evidence bundle
- OtherCISA KEV threat feed
polls the CISA Known Exploited Vulnerabilities catalog
Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 4 unverifiable items were discarded. A README claim is the maker's description, not something we tested.
Watch AiSOC
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Active | 2+ majors behind | 982 |
| Oct 12, 2026 | Active | 2+ majors behind | 720 |
| Sep 29, 2026 | Active | 2+ majors behind | 575 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- apps/mobile/package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- apps/web/package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- packages/aisoc-action/package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- packages/aisoc-lite/package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- packages/ocsf/package.json ↗ declared dependency versions and stack (at commit 34ca18c)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)