vigil

Name: vigil Review
Item: vigil
Rating: 3.2
Author: Aaron Matthews

Skill Development Usable

Works inClaude Code

Usable Scanned — metadata only

It enables teams to build private, AI-driven security operations centers without leaking sensitive codebases to third-party providers.

Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.

Automate the detection of security vulnerabilities within your source code
Scan codebase logs to identify potential security threats and anomalies
Analyze code patterns to find weaknesses before deployment

400 starsApache-2.0 (commercial OK)FreeQuick setup

Usable rating — This tool is functional but has notable gaps. Review the evaluation notes below before deploying.

Why it matters

It enables teams to build private, AI-driven security operations centers without leaking sensitive codebases to third-party providers. This mitigates data exfiltration risks while automating threat detection within existing infrastructure.

Best for

Security engineering teams building localized, AI-powered SOC capabilities using private or remote large language models.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/Vigil-SOC/vigil

By Vigil-SOC

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Command

claude plugins install Vigil-SOC/vigil

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.

First thing to try

After installing, paste this into Claude:

Help me automate the detection of security vulnerabilities within my source code

CostFree

Trust Signals Auto-scanned

Stars400Last updated2026-10-23LicenseApache-2.0 (OK for commercial use)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-10-23 · scanner v1

Community Pulse Active

Discussed on Hacker News

Vigil 0.5.0: threat hunting agent where a deterministic controller owns state — Hacker News · 2 pts

1 mentions across 1 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

Scored from trust signals (evidence-eval-v1): 400 GitHub stars; contributors unknown; last commit 0d ago; license Apache-2.0.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

3/5

Versatility

4/5

Reliability

3/5

Security

3/5

Overall score3.25 / 5.00 UsableEvaluatedOct 2026

Scored from trust signals (evidence-eval-v1): 400 GitHub stars; contributors unknown; last commit 0d ago; license Apache-2.0.

← Back to the Claude Observatory