AgentIndex icon
AgentIndex
Wazuh-MCP-Server logo
Wazuh-MCP-Server
★ 93
vs
vigil logo
vigil
★ 397

Wazuh-MCP-Server vs vigil

Wazuh-MCP-Server: Wazuh-MCP-Server is a defensive Security Operations Center (SOC) server exposing over 100 tools for security analysis. It integrates with Wazuh SIEM, various threat intelligence feeds, and provides advanced capabilities like MITRE-driven APT correlation and LangGraph investigation workflows.; vigil: Vigil is an open-source AI Security Operations Center (SOC) that leverages specialized AI agents and customizable Markdown-defined workflows to automate security playbooks. It integrates with over 30 security tools via the open Model Context Protocol (MCP), enabling human-in-the-loop automation for tasks like incident response, threat hunting, and forensics.

01

TL;DR

Wazuh-MCP-Server logo
Wazuh-MCP-ServerSecurity & Safety · ★ 93

Performing comprehensive cyber attack overviews and generating curated threat reports.

Read Wazuh-MCP-Server full review →
vigil logo
vigilMulti-Agent · ★ 397

Automate end-to-end incident response processes

Read vigil full review →
02

Side-by-Side Comparison

Field
Wazuh-MCP-Server logoWazuh-MCP-Server
vigil logovigil
Category
Security & Safety
Multi-Agent
Stars
★ 93
★ 397
License
BSD-3-Clause
NOASSERTION
Install Command
git clone <repo> && cd Wazuh-MCP-Server && sudo bash setup.sh
git clone --recurse-submodules https://github.com/Vigil-SOC/vigil.git && cd vigil && ./start.sh
Updated
1w ago
1d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Wazuh, SIEM, SOC
AI SOC, Multi-Agent System, Security Automation
03

Features

Wazuh-MCP-Server logoWazuh-MCP-Server
01Comprehensive Wazuh SIEM integration for alert search and management.
02Advanced 3-Sum APT correlation engine for multi-IoC and volumetric attack detection.
03Unified threat intelligence aggregation from multiple providers.
04LangGraph-powered investigation workflows and attack graphing for incident analysis.
05Extensive host and domain forensics tools, including typosquatting and webshell detection.
vigil logovigil
0113 Specialized AI Agents for various SOC roles (e.g., Triage, Investigator, Responder)
02Customizable multi-agent workflows defined as Markdown playbooks
0330+ security tool integrations via the open Model Context Protocol (MCP)
04Chat-driven case management and MITRE ATT&CK mapping
05Human-in-the-loop approval workflow with confidence-based automation
04

Use Cases

Wazuh-MCP-Server logoWazuh-MCP-Server
↳Performing comprehensive cyber attack overviews and generating curated threat reports.
↳Correlating APT attacks using MITRE-driven rules and volumetric analysis to identify threats.
↳Investigating suspicious activities and IPs with unified threat intelligence and LangGraph-powered workflows.
↳Conducting host and domain forensics, including vulnerability assessment and detection of malicious artifacts.
vigil logovigil
↳Automate end-to-end incident response processes
↳Conduct proactive threat hunting and analysis
↳Perform comprehensive digital forensics and malware analysis post-incident
↳Manage security cases and findings through natural language commands
05

Best For

Wazuh-MCP-Server logoWazuh-MCP-Server
—
vigil logovigil
Hidden Gem
FAQ

FAQ

What is the difference between Wazuh-MCP-Server and vigil?
Both Wazuh-MCP-Server and vigil are in the Security & Safety category. Wazuh-MCP-Server has 93 stars, while vigil has 397 stars.
Which is better, Wazuh-MCP-Server or vigil?
The best choice depends on your use case. Choose Wazuh-MCP-Server if Performing comprehensive cyber attack overviews and generating curated threat reports., and vigil if Automate end-to-end incident response processes.
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (BSD-3-Clause).
Is vigil free or open source?
Yes, vigil is open source on GitHub (NOASSERTION).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to Wazuh-MCP-Server →Alternatives to vigil →Wazuh-MCP-Server details →vigil details →