Wazuh-Autopilot

Autonomous AI SOC for Wazuh SIEM — 11 security-expert agents triage, correlate, investigate and plan responses 24/7, every action gated by two-tier human approval. Runs on OpenClaw, Hermes or NVIDIA NemoClaw; any LLM, self-hosted vLLM, or fully air-gapped Ollama. Evidence packs, SOC KPIs, Slack approvals. Maintained by gensecaihq on GitHub, where it has earned 46 stars from the community.

It's actively developed around agentic-ai, autonomous-agents, mcp, and is a solid reference for anyone building with these tools.