CyberSentinel AI
A self-hosted platform that runs real security scanners such as Nmap, Nikto and SQLMap inside a Docker sandbox and uses a locally or remotely run AI model to analyze the results, rather than only suggesting commands.
CyberSentinel AI packages 33 security tools, covering live scanners, threat-intelligence lookups, SIEM integration, AI-assisted log and phishing analysis, threat-hunting rule generation, and compliance references such as MITRE ATT&CK and NIST, into a Docker Compose stack that runs entirely on the user's machine. Rather than only suggesting commands for a human to run, it executes the scanners inside an isolated sandbox container and has an AI model analyze the results.
It can switch between four AI providers mid-conversation, including a fully local Ollama model, GPT, Claude or OpenRouter. A Neo4j knowledge graph maps attack surfaces and technique relationships, a ChromaDB-backed retrieval layer grounds the model's answers in security references, and an ELK stack ingests pre-seeded log events for analysis. Setup is a Docker Compose stack plus a one-time model pull, after which a web dashboard exposes all 33 tools.