Wazuh-Autopilot: Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages

by gensecaihq · MCP Server · ★ 57

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install Wazuh-Autopilot

git clone https://github.com/gensecaihq/Wazuh-Autopilot.git && cd Wazuh-Autopilot

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 56/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agent-skillsagent-swarmagentic-aiai-agentsautonomous-agentscybersecurityhuman-in-the-loopincident-responsellmmcp

Quick Facts

Stars57
Forks16
LanguagePython
CategoryMCP Server
LicenseMIT
Quality Score56/100
Open Issues4
Last Updated2026-09-24
Created2026-02-13
Platformsdocker, mcp, python
Est. Tokens~13k

About Wazuh-Autopilot

🛡️ Wazuh Autopilot An agentic SOC for Wazuh, built on Strands Agents. A 13-agent swarm triages, investigates and responds through the Wazuh MCP Server, and humans stay in control. <img src="https://img.shields.io/badge/Docker-24

Compatible Skills

These tools work well together with Wazuh-Autopilot for enhanced workflows:

  • allama — semantic(0.31)+complementary+shared_fw(anthropic,ollama)+rare_topics+same_lang+similar_pop+shared_platform (86%)
  • ai_for_the_win — semantic(0.27)+complementary+rare_topics+same_lang+similar_pop+shared_platform (73%)
  • deadend-cli — semantic(0.16)+complementary+shared_fw(anthropic,ollama)+same_lang+similar_pop+shared_platform (71%)

Wazuh-Autopilot alternative? Top 6 similar tools

Looking for a Wazuh-Autopilot alternative? If you're comparing Wazuh-Autopilot with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • Wazuh-MCP-Server by INFOKOM-KI · ⭐ 100

    Wazuh MCP Server: AI-Driven SOC Automation

  • ai_for_the_win by depalmar · ⭐ 162

    Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red tea

  • zettelforge by ThreatRecall · ⭐ 66

    Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MC

  • zettelforge by rolandpg · ⭐ 50

    Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MC

  • allama by digitranslab · ⭐ 201

    🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat

  • captain-claw by kstevica · ⭐ 193

    Command a fleet of AI agents, on every deck, every desk, every wrist. Self-hosted multi-agent platform with me

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools