SecSight

Self-hosted AI SOC platform

SecSight Self-hosted AI SOC platform SOC Analyst · Web UI · Architecture component SOC Analyst Web UI FastAPI · Python 3.12 · Architecture component · async + Pydantic v2 FastAPI Python 3.12 async + Pydantic v2 RabbitMQ · job queue · Architecture component RabbitMQ job queue Celery Worker · Python 3.12 · Architecture component · AI inference jobs Celery Worker Python 3.12 AI inference jobs Ollama · local LLM · Architecture component Ollama local LLM Prometheus + Grafana · metrics · Architecture component Prometheus + Grafana metrics PostgreSQL 16 · events + alerts · Architecture component PostgreSQL 16 events + alerts MCP Server · tool surface · Architecture component · FastMCP stdio + HTTP MCP Server tool surface FastMCP stdio + HTTP Redis 7 · session + cache · Architecture component Redis 7 session + cache REST SQLAlchemy cache enqueue consume infer tools Legend Backend Database Cloud Message bus External

Ingest

  • • Analyst UI drives FastAPI
  • • RabbitMQ buffers AI work

Inference

  • • Celery worker pulls Ollama for triage
  • • FastMCP exposes tools

Observability

  • • Prometheus metrics from API + worker
  • • OpenTelemetry traces pipeline-wide