gensecaihq/Wazuh-Autopilot

Description and use

**Project Summary**
The Wazuh-Autopilot project is an open-source, autonomous Security Operations Center (SOC) layer for Wazuh that utilizes OpenClaw agents with Model Context Protocol (MCP) to auto-triage alerts, correlate incidents, and generate response plans with human-in-the-loop approval. This project integrates evidence packs, Prometheus metrics, and Slack, providing a standardized protocol for connecting AI assistants to real tools and data. With its medium production readiness, Wazuh-Autopilot is suitable for prototypes or internal workflows with thorough dependency and maintenance checks.

**Value Proposition**
The primary value proposition of Wazuh-Autopilot lies in its ability to standardize integrations between AI assistants and real tools and data through the Model Context Protocol. This enables seamless communication and automation of tasks, making it an attractive solution for organizations looking to streamline their security operations.

**Practical Adoption Path**
To practically adopt Wazuh-Autopilot, follow these steps:

1. Evaluate the project's implementation signals, such as API/SDK/CLI, language metadata, and focused topics.
2. Review the project's production readiness, dependencies, and maintenance requirements.
3. Assess the project's security posture, license, and active maintainers.
4. Integrate W

Use in a workflow

gensecaihq/Wazuh-Autopilot helps connect AI assistants to real tools and data through a standard protocol.

• connect AI agents to tools
• ship Model Context Protocol servers
• standardize integrations

Limitations and review notes

Medium: useful for prototypes or internal workflows, with dependency and maintenance checks before production.