Security Operations Python Packages

mcp-panther

Write detections, investigate alerts, and query logs from your favorite AI agents

google-secops-mcp

Google SecOps MCP server

gti-mcp

Google Threat Intelligence MCP server

secops-soar-mcp

Google SecOps SOAR MCP server

scc-mcp

Security Command Center MCP server

secops-mcp

Google SecOps MCP server (official alias for google-secops-mcp)

aisoc-sandbox

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

iflow-mcp-m507-ai-soc-agent

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

aisoc-detections

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

aisoc-sdk

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

aisoc-cli

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

aisoc-plugin-sdk

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

ps-banshee

PS Banshee is a command-line interface (CLI) tool designed to provide quick and efficient access to Recorded Future Intelligence. Built for security professionals, PS Banshee helps streamline investigations and automate common security operations tasks.

mseep-mcp-panther

Write detections, investigate alerts, and query logs from your favorite AI agents

iflow-mcp-panther-labs-mcp-panther

Write detections, investigate alerts, and query logs from your favorite AI agents

warlog-spec

warlog-spec is the open contract behind the Learning SOC, a security operations model where ratified analyst decisions compound into governed, auditable memory. Built by Warlog.