Wildbox

6.5easy start · #8 of 19
in SOAR Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows.

Visit site Alternatives

Wildbox is ranked #8 of 19 in SOAR software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows.

Compared on SOAR software

Playbook automation: Yes
Threat intel actions: Yes
Deployment model: self_hosted

Best Wildbox alternatives

See all 12

Sumo Logic 0 of 4 in the starter kit Lesson 17.5 CrowdStrike Falcon Surface 0 of 4 in the starter kit Lesson 27.0 Tracecat 0 of 4 in the starter kit Lesson 37.0 OpenSOAR 0 of 4 in the starter kit Lesson 46.7 Tines 0 of 4 in the starter kit Lesson 56.7 Rapid7 InsightConnect 0 of 4 in the starter kit Lesson 66.6

The record

Product: Wildbox is a self-hosted, open-source security operations platform for threat monitoring, analysis, and automated response.
License: The project is open source under the MIT license.
Deployment: The site’s quick start uses Docker Compose and says the dashboard is available at localhost:3000.
Threat intelligence: Wildbox aggregates threat data from more than 50 sources for IOC lookup and enrichment.
Cloud security: Its cloud security feature scans AWS, Azure, and GCP for misconfigurations and tracks cloud security posture.
Vulnerability management: The platform scans, prioritizes, and tracks CVEs across assets through remediation.
Incident response: YAML-based playbooks support repeatable automated incident-response workflows.
AI analysis: Wildbox uses large language models for threat analysis and report generation, with users bringing their own provider.
Identity and access: The platform provides users, teams, and role-based access control behind an authenticated API gateway.
Integrations: The API reference describes configurable external integrations with ticketing, SIEM, notification, and vulnerability types.
API authentication: The documentation says API endpoints require a Bearer token and also describes API-key authentication for some services.
Security guidance: The project security policy advises production users to replace default secrets and use HTTPS/TLS for external traffic.
Support: The project directs users to GitHub Discussions for questions and GitHub Issues for bug reports.
Intended users: The site names organizations, security teams, DevOps and platform teams, and researchers as audiences.

Where it ranks on The Geeks Club

Best SOAR Software in 2026#8 of 19

Is Wildbox yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Wildbox

Sources

wildbox.io· checked 4 Oct 2026
wildbox.io/api-reference.html· checked 4 Oct 2026
wildbox.io/docs.html· checked 4 Oct 2026
github.com/fabriziosalmi/wildbox/blob/main/SECURIT· checked 4 Oct 2026
github.com/fabriziosalmi/wildbox· checked 4 Oct 2026