Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
An open source AI-native agentic SOC platform
| Date | Stars |
|---|---|
| 2026-07-31 | 266 |
| 2026-08-03 | 290 |
| 2026-08-06 | 290 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
35.0
growth rate 0.00%/day
# Argus-Agentic-SOC-Platform
This repository contains the Argus-Agentic-SOC-Platform — an AI-native Agentic Security Operations Center (SOC) platform focused on unifying alerts ingestion, incident investigation, ticket collaboration, asset correlation, workflow orchestration, and AI-assisted analysis.
The project uses a separated frontend/backend architecture: the frontend is built with Next.js + React to provide the operator console, the backend uses Django + Django REST Framework to provide APIs and orchestration, and PostgreSQL is the primary data store. Elasticsearch is optionally supported as an external alert source.
---
<img width="1445" height="703" alt="image" src="https://github.com/user-attachments/assets/e4d1b273-3090-4632-85b9-2b455860e73a" />
---
## 1. Product Positioning
The platform consolidates core SOC objects into one product with open-source solutions:
- Alerts: alert ingestion, caching, search, and display
- Tickets: incident/ticket management and collaboration
- CMDB: asset inventory and contextual linking
- Dashboards: operational dashboards and visualizations
- Integrations: connectors and external configuration
- Correlation: correlation rules and analysis
- Workflows / Orchestrator: automation and scheduling
- AI Assistant: security-focused intelligent analysis and MCP tool integration
---
## 2. Core Capabilities
### Security Operations
- Unified alert ingestion and paginated lists
- Ticket lifecycle and activity history
- Asset-context enrichment
- Dashboard-based operational views
- Correlation rules and investigative helpers
### Automation
- Workflow orchestration and API-driven calls
- Scheduled task execution and audit logs
- Automation chains for tickets/alerts
### AI Features
- Built-in AI Assistant conversational interface
- MCP-style tool registry and JSON-RPC connector
- Ticket-context queries, similar-case retrieval, CMDB queries, and observable extraction
### Platform Capabilities
- Token-based authentication
- OTP login/verification endpoints
- PostgreSQL persistence
- Docker Compose and Kubernetes deployment manifests
---
## 3. System Architecture Diagram
```mermaid
flowchart LR
U[Security Analyst / SOC Operator] --> FE[Frontend\nNext.js 15 + React 18 + Ant Design]
FE -->|/api/v1| BFF[API Proxy Layer\nNext Route Handler]
BFF --> BE[Django API Layer\nDjango 6 + DRF]
subgraph Core_Backend_Modules[Core Backend Modules]
A[Alerts]
T[Tickets]
C[CMDB]
D[Dashboards]
I[Integrations]
R[Correlation]
W[Workflows]
O[Orchestrator]
AI[AI Assistant + MCP]
AUTH[Accounts / Auth / RBAC]
end
BE --> A
BE --> T
BE --> C
BE --> D
BE --> I
BE --> R
BE --> W
BE --> O
BE --> AI
BE --> AUTH
A --> PG[(PostgreSQL)]
T --> PG
C --> PG
D --> PG
I --> PG
R --> PG
W --> PG
O --> PG
AI --> PG
AUTH --> PG
A -. optional ingestion .-> ES[(Elasticsearch)]
I -. connect .-> EXT[External Systems / Data Sources]
AI -. MCP / tool calling .-> MCP[MCP Servers / Tool Endpoints]
O -. scheduled execution .-> TASKS[Scheduled Tasks]
```
### Architecture Notes
1. Frontend: Built with Next.js App Router; handles pages, UI composition, and API proxying.
2. API Layer: Django + DRF provide unified business APIs (auth, alerts, tickets, CMDB, workflows, AI).
3. Business Layer: Domain features are organized into Django apps for independent evolution and RBAC.
4. Data Layer: PostgreSQL is the primary datastore; Elasticsearch is an optional alert source.
5. Intelligence Layer: AI Assistant offers conversation and tool-call capabilities, exposing MCP-style interfaces.
6. Automation Layer: Orchestrator and Workflows provide scheduled execution, orchestration, and audit trails.
More information:
https://github.com/Sec-Link/Argus-Agentic-SOC-Platform/blob/main/docs/architecture.md
---
## 4. Tech Stack
### Frontend
- Next.js 15
- ReactExcerpt of 7,098 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:595df2f313fd1284, name:agentic, desc:agentic