Research, tutorials, and updates from the Vigil SOC community — written by the engineers, researchers, and builders who are defining AI-native security operations.
VigilSOC 0.7.0 is live on GitHub — introducing Sigma rule linting and replay, expanded SIEM federation over Elastic/Wazuh and OpenSearch, critical audit and response correctness fixes, and a big sh...
Read post →VigilSOC 0.6.0 is available on GitHub — featuring frozen /api/v1 contracts and MCP tools, fresh container images resolving 0.5.0 Helm permissions, episodic memory, shadow adjudication, the kickoff ...
Read post →Everyone is building a software factory right now. Here is the one we built to develop Vigil, the opinions baked into it, and what has surprised us so far.
Read post →When and how to use code for controls - how my experience in building models led us to design an apparently new approach
Read post →VigilSOC 0.5.0 is available on GitHub — with faster event processing, an expanded rule engine, cleaner CLI and APIs, and a stack of stability fixes. Plus contributor shoutouts, new Community Office...
Read post →The repo is moving at its highest pace ever, the core is refactored and spec-aligned, and MCP's new 2026-07-28 release turned our biggest pre-1.0 risk into a 12-month safety net along with a statel...
Read post →A task-shaped patching harness and one validation-feedback round improved a local PatchEval result by roughly 25 percentage points while keeping model costs low.
Read post →Introducing the Vigil SOC blog — a space for the open source AI SOC community to share research, tutorials, and updates on AI-native security operations.
Read post →