Plain-AyI
← All projects
Run AI on your computer

AiSOC

A self-hosted security monitoring center that uses AI agents to spot, investigate and suggest responses to threats.

What it does

AiSOC is a security operations center, the kind of system a company uses to watch its computers and accounts for attacks. It collects security records from your existing tools, checks them against a large library of detection rules, and groups related warnings into incidents.

An AI agent then investigates each incident. Every prompt it sends and every tool it uses is recorded in a log, so people can check its reasoning later. It proposes an action, but a human must approve before anything is changed.

It comes with a bundled local AI model and a free public threat list, so its makers say it works without any API keys (codes from online AI services). It can connect to many common security products, and it includes sample data so you can see how it works before connecting real systems.

Who it's for

Security teams and IT staff who want an open-source, self-hosted system for monitoring threats with AI help.

Can I use it without coding?

With some setup. You install it with Docker using a few commands or a one-line installer, then use it through a web console. New to this? Start here.

Can I run it?

Cost
FreeNothing to pay or sign up for.
Runs on
Mac, Windows, Linux, Server, Cloud
Computer
Works best on a powerful computer or one with a graphics card (GPU)
Privacy
Runs on your own device: your data stays with you
API key
Not needed

Try it

  1. Install Docker, or use the project's one-line installer for Windows, Mac or Linux.
  2. Sign in and press Load sample data in the setup wizard to watch alerts appear.

Using Claude Code, Cursor or another AI coding assistant? Paste the prompt and it will walk you through the setup.New to this?

Before you install

  • Only download from the official GitHub page. Copies with similar names exist for many popular projects.
  • Plain-AyI is an independent guide and doesn't host or review the software it lists. Please check each project's official page before installing.
  • License (MIT): Very permissive: free to use, change and share, including for business.
  • More on staying safe