Check its license. It has its own license: read it before using it for work.

Is AI_SOC still maintained?

Yes, active. Last change 2 months ago.

Some track record. 176 stars, 1 years old. Get it from the official repo and read what it installs.

Reading the repo

Opening the box…

How to install on macOS

zhadyz/AI_SOC

Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG

Python

Before you start

Is it free?: Check its licenseIt has its own license: read it before using it for work.
Still maintained?: Yes, activeLast change 2 months ago.
Can I trust it?: Some track record176 stars, 1 years old. Get it from the official repo and read what it installs.

Difficulty: Involved
Time: 30 min or more
Stars: ★ 176
Activity: Updated 2 months ago

Saved setup from 5 h ago

Will it work on macOS?

Yes, it runs on macOS

You'll build it yourself with Python.
It also needs PostgreSQL running (Docker handles this).

Your system

macOS Windows Linux

Start here

Website ↗research.onyxlab.aiThe project's own site.

Heads-upIt also needs PostgreSQL and 28 settings in .env (6 secret).

Setup script in the repo

The maintainers included scripts/setup-configs.sh. Run it from the cloned folder after reading it.

bash scripts/setup-configs.sh

Also: START-AI-SOC.bat

5 steps on macOS

Download setup.sh

Then run bash setup.sh. It stops at the first error and is safe to run again. Servers and tests aren't started; it lists them at the end. Read it first.

1
Clone the repository
Needs Git: xcode-select --install
```
git clone https://github.com/zhadyz/AI_SOC.git
cd AI_SOC
```
2
Install the required runtimes
Python 3.x
```
brew install python
```
3
Configure environment variables
Fill in secrets: AI_SOC_API_KEY, POSTGRES_PASSWORD, AI_SOC_AUTH_SECRET, AI_SOC_MODEL_SIGNING_KEY, TRIAGE_MAX_TOKENS, TRIAGE_API_KEY_ENABLED
```
cp .env.example .env
```
4
Start backing services
Needs: PostgreSQL
```
brew install --cask docker  # Docker Desktop
docker compose -f compose.yaml up -d
```
If you see Cannot connect to the Docker daemon: start Docker Desktop (or the Docker service) first.

Install dependencies

python -m venv .venv
source .venv/bin/activate
pip install -e .

Did you get it running?

No reports for macOS yet.

Still stuck? Get a written guide

GitManual AI Agent reads the 9 key files and writes a step-by-step guide for macOS. Once written, it's saved for everyone.

Parts list

1×Python 3.xruntime
1×pip package manager
1×PostgreSQL service

28× settings in .env

AI_SOC_API_KEYsecret
POSTGRES_PASSWORDsecret
AI_SOC_AUTH_SECRETsecret
AI_SOC_MODEL_SIGNING_KEYsecret
AI_SOC_IDENTITY_DIR
OLLAMA_MODEL
TRIAGE_SERVICE_NAME
TRIAGE_SERVICE_VERSION
TRIAGE_LOG_LEVEL
TRIAGE_OLLAMA_HOST
TRIAGE_PRIMARY_MODEL
TRIAGE_FALLBACK_MODEL
TRIAGE_LLM_TEMPERATURE
TRIAGE_LLM_TIMEOUT
TRIAGE_MAX_TOKENSsecret
TRIAGE_HIGH_CONFIDENCE_THRESHOLD
TRIAGE_MEDIUM_CONFIDENCE_THRESHOLD
TRIAGE_AUTO_ACTION_THRESHOLD
TRIAGE_ML_ENABLED
TRIAGE_ML_API_URL
TRIAGE_ML_TIMEOUT
TRIAGE_ML_DEFAULT_MODEL
TRIAGE_RAG_ENABLED
TRIAGE_RAG_SERVICE_URL
TRIAGE_RAG_TOP_K
TRIAGE_MAX_CONCURRENT_REQUESTS
TRIAGE_REQUEST_TIMEOUT
TRIAGE_API_KEY_ENABLEDsecret

Share this manual

Is this your repo?

Add a badge to your README so newcomers find these steps.

[![Setup manual](https://gitmanual.com/zhadyz/AI_SOC/badge.svg)](https://gitmanual.com/zhadyz/AI_SOC)

Good to know

Dockerfile available (base image: python:3.11-slim).
Nested projects: dashboard/requirements.txt, lab/requirements.txt, ml_training/requirements.txt, services/alert-triage/requirements.txt and 9 more

Details

License: Not detected
Open issues: 1
Branch: master

Files we read (9)

.env.example

.github/workflows/cd.yml

.github/workflows/ci.yml

.github/workflows/unified-docs-portal.yml

Dockerfile

README.md

compose.yaml

pyproject.toml

services/alert-triage/.env.example

416 files in the repo

Yes, it runs on macOS

Start here

5 steps on macOS

Clone the repository

Install the required runtimes

Configure environment variables

Start backing services

Install dependencies

Did you get it running?

Still stuck? Get a written guide