OneAlert

AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+ tests. Open-source alternative to Claroty/Dragos for SMBs. Maintained by mangod12 on GitHub, where it has earned 30 stars from the community.

It's actively developed around ai-agents, compliance, cybersecurity, and is a solid reference for anyone building with these tools.