SocTalkAI-first SOC platform for MSPs and MSSPs

Run a dedicated Wazuh stack per customer on your own Kubernetes, behind one control plane.

Multi-tenant

A single control plane runs per-customer SOC stacks in isolated Kubernetes namespaces, with Postgres RLS as the data-isolation backstop.

Wazuh data plane

Each customer gets their own Wazuh manager and indexer. Agents enroll over hostname-routed ingress. Fully open source.

AI triage, human gate

LangGraph workers do the triage and propose actions; analysts approve escalations. BYO LLM per tenant.

What's here

If you're installing SocTalk, start with Install. Once it's running, Operate has the day-2 procedures (ops, upgrades, troubleshooting). Reference is for digging into the architecture, RLS hygiene, chart contract, network policy, secrets, and sizing.

SocTalkAI-first SOC platform for MSPs and MSSPs

Multi-tenant

Wazuh data plane

AI triage, human gate

What's here ​

What's here