Open source
Built on ZeroSOC, open for anyone to check
A security product asks for trust. We think the best way to earn it is to let anyone read how it works, so Wakefence ZeroSOC is built on ZeroSOC, an open framework and open-source engine for autonomous security operations that Wakefence started and maintains.
What is open
The ZeroSOC Framework
A vendor-neutral standard for autonomous security operations: definitions, playbooks, decision criteria and the guardrails an autonomous executor must respect. Apache 2.0.
The engine and the Community edition
The triage and investigation engine, which an organization can run in its own Azure subscription as the ZeroSOC Community edition. AGPL-3.0.
Skills and integrations
The agent skills that carry out the framework and the MCP servers that connect it to security tools, starting with Microsoft's. Open source.
Two ways to run it
Run it yourself, or let us run it for you
The Community edition is free and yours to operate. Wakefence ZeroSOC is the same engine, run by us as a service, with the features a business needs on top: ZeroSOC Detect, phone escalation, the Advisor, and an operations team behind it.
Learn more about the project
- The project, the framework and the documentation: zerosoc.org
- The code: github.com/ZeroSOC