SocTalkAI-first SOC platform for MSPs and MSSPs

Run a dedicated Wazuh stack per customer on your own Kubernetes, behind one control plane.

Multi-tenant

A single control plane runs per-customer SOC stacks in isolated Kubernetes namespaces, with Postgres RLS as the data-isolation backstop.

Wazuh data plane

Each customer gets their own Wazuh manager and indexer. Agents enroll over hostname-routed ingress. Fully open source.

AI triage, human gate

LangGraph workers do the triage and propose actions; analysts approve escalations. BYO LLM per tenant.

What's here

If you're installing SocTalk, start with Install. Once it's running, Operate has the day-2 procedures (ops, upgrades, troubleshooting). Reference is for digging into the architecture, RLS hygiene, chart contract, network policy, secrets, and sizing.

Where things live

The product home is at soctalk.ai. Source lives on GitHub, which is also where issues and RFCs go.