SOCless - serverless security orchestration, automation and response

SOCless is a serverless framework built to help security teams easily automate their incident response and operations workflows.

Features

• Responds to real-time or scheduled events
• Orchestrates existing security tools into workflows using AWS Lambda functions written in Python 3
• Interact with humans as part of automated workflows and adapt to their responses
• Static IP address that can be whitelisted to internal resources
• Rapid automation development life-cycle courtesy of reusable, modular and shareable plugins
• Infrastructure and response workflows deploy as code using The Serverless Framework
• Serverless design has low cost, low operational overhead, and scales effortlessly

Ready? Check out the docs!