This client wanted the benefits of an AI-driven SOC — faster detection, automated triage, fewer noisy alerts — without committing to expensive commercial platforms before proving the approach works for their environment. MeyLing proposed an open-source-first pilot.
We're deploying Wazuh and OpenSearch for log correlation and detection, with TheHive and Shuffle SOAR layered on for case management and triage automation. Every component is open-source by default; commercial tooling stays on the table only if the pilot's results justify the spend.
The pilot runs alongside the client's existing monitoring rather than replacing it outright, so nothing is at risk while we tune detection rules and automation playbooks against their real traffic patterns.
Pilot engagement — in progress
Open-source AI SOC: detection, triage, alerting
Active pilot, phased rollout
Phase 1 (detection & log correlation) in active deployment since Q3 2025. This page will be updated with results once Phase 1 completes.
We'll scope an open-source-first pilot against your real traffic, with paid tooling only where the results justify it.
MeyLing