AiSOC runs 2,538 of its 7,023 detection rules and hands each incident to an auditable AI agent, with a human approving every response
AiSOC is an open-source, self-hostable security operations center that normalizes incoming telemetry, detects with the 2,538 executable rules of its 7,023-rule library, groups what fires into incidents, and has an AI agent investigate each one with every prompt and tool call recorded. Proposed responses reach a vendor only after a human approves, and new threat intelligence re-sweeps the history already collected. The project documents a single-server run from install to AI verdict, and notes a roughly 2 GB model download on first run.