Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

A curated knowledge base to build, run and mature a SOC (including CSIRT).

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

基于开源组件（Inception & SQLAdvisor & SOAR）的SQL审核&SQL优化的Web平台

Extract and aggregate threat intelligence.

Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

CyberSecurity BLUE TEAM containerized platform that brings together open-source tools for SIEM, DFIR, CTI, SOAR, and Network Analysis

Encyclopedia for Executables

🤖 Admyral enables continuous control monitoring for any custom control

SQL optimizer and rewriter for laravel. - laravel 的 SQL 优化器和重写器。

Notice: Postee is no longer under active development or maintenance.

SQL optimizer and rewriter(assisted SQL tuning). - SQL 优化器和重写器(辅助 SQL 调优)。

Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch jimi has developed into a fully fledged IT automation platform which effortlessly integrates with your existing tools unlocking the potential for autonomous IT and Security operations.

[Migration in progress] Official Soar Packages Repository

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

django-base-templates 主要为 django 开发DEMO, 支持 非前后端分离 和 前后端分离模式 。

A curated repository of incident response playbooks

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).

Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the community edition) data processing. The original intention is to solve complex data/event processing and external system linkage requirements through standardized rules.

IYSQL - Improve Your SQL

SOARCA - The Open Source CACAO-based Security Orchestrator!

Manage, monitor and improve your cyber security posture.

Source code for IBM SOAR Apps that are available on our App Exchange

SQL optimizer and rewriter extension package for thinkphp5/6 framework.

I wish the world continues to be lively, I wish you and me are still you and me.

安全编排与自动化响应平台

A Lambda-powered Security Orchestration framework for AWS GuardDuty

Serverless SOAR (Security Orchestration, Automation and Response) framework for automatic inspection and evaluation of security alert