Vigil

Vigil is an open-source AI security operations center where incident-response playbooks are editable Markdown files and agent logic is readable Python, connecting to a team's existing security tools through the Model Context Protocol. It chains specialized AI agents, such as triage, investigation, and threat hunting, into multi-agent workflows for incident response and forensic analysis, checking cost and confidence before automated actions. It's built for security operations teams who want to own and audit their AI automation rather than run a closed-source vendor product.