Agentic-Sec

Agentic.sec is a full-stack, AI-powered SOC platform that solves the detection rule chaos every security team faces — hundreds of rules scattered across Sigma, Microsoft Sentinel KQL, and Elastic formats, with no central place to manage, test, or review them. We built a unified pipeline — Ingest, Catalog, Analyze, Test, Convert, Review — all backed by Google Gemini AI, with a conversational agent that lets analysts query their entire detection library in natural language, analyze CloudTrail logs for kill chains, enrich indicators with live threat intel, and get AI-generated review manifests for every rule. Under the hood we use AG-UI (Agent-User Interaction protocol) to stream structured agent events — thinking steps, tool calls, and rendered dashboard widgets — directly into the chat UI in real time, and CopilotKit to wire the AI agent into the React frontend so the agent can read and mutate UI state, making it a true co-pilot rather than just a chatbot.