Popular GitHub Repositories for Wazuh

An open-source MCP server for integrating Wazuh security data with LLMs (such as the Claude Desktop App). This service authenticates with the Wazuh RESTful API, retrieves alerts from Elasticsearch indices, transforms events into an MCP-compliant JSON format, and exposes an HTTP endpoint for Claude Desktop to fetch real-time security context.

Welcome to my Cybersecurity Homelab, where I experiment with ethical hacking, penetration testing, network security, AI Agent automation and system hardening. This repo documents the architecture, software stack, configurations, and automation scripts used in my self-hosted cybersecurity lab.

IDPS-ESCAPE (Intrusion Detection and Prevention Systems for Evading Supply Chain Attacks and Post-compromise Effects), part of the CyFORT project: open-source SOAR system powered by a dedicated ML-based anomaly detection toolbox (ADBox) integrated with open-source software such as Wazuh and Suricata.

Yet another SoC Lab

An MCP server for fetching URLs / Youtube video transcript.

Wazuh vulnerability report maker

Completed: Google Cybersecurity Professional Certificate (Coursera) | 50+ Hands-On Labs | SIEM • Incident Response • Python Automation • Forensics • Threat Hunting | SOC Analyst Portfolio 2026

Wazuh integration to send alerts to Keep (open-source alert management and AIOps platform)

This is home lab project automates SOC workflows using Shuffle, Wazuh and TheHive.