Shuffle Security
Shuffle Security (beta!) is the open source incident response and security operations frontend for Shuffle Core — built for and by security professionals. It brings incidents, host monitoring, vulnerabilities and AI-driven response into a single workspace, designed to work well for SOC teams, MSSPs and service providers. Built to be rebuilt and rebranded.
Key Features — Community & Support — Documentation — Getting Started — Set up a demo call
Try it
- Cloud: Register at https://shuffle.security/register and get cooking
- Self-hosted: see Install below
Install (self-hosted)
git clone https://github.com/Shuffle/shuffle.security
cd shuffle.security
docker compose up -d
That is it. Open http://localhost:3002. Defaults in .env work out of the box — edit them only for production.
Support
Related repositories
- Shuffle (core platform): https://github.com/shuffle/shuffle
- OpenAPI apps: https://github.com/shuffle/security-openapis
- Documentation: https://github.com/shuffle/shuffle-docs
- Workflows: https://github.com/shuffle/shuffle-workflows
- Python apps: https://github.com/shuffle/python-apps
Features
- Unified Incidents view (OCSF 2005) for alerts and cases
- Observables, assets and IOC correlation with threat intel enrichment
- AI Agent for triage, response suggestions and approvals
- Automation pipelines for ingest and forwarding
- Multi-tenant / sub-organization support for MSSPs
- 3,000+ integrations via the Apps catalog
Documentation
Documentation can be found on https://shuffler.io/docs and is written here: https://github.com/shuffle/shuffle-docs.
Setting up a local development environment
npm install
npm run dev
Configure the API target via a .env file in the project root:
VITE_SHUFFLE_API_URL=https://shuffler.io