Show HN: Fengarde–OCSF-native open-source SIEM with local AI triage (Apache-2.0)

Category: security

Tags: siem, ocsf, security, log-normalization, opensearch, local-llm, nis2, ot-security

Score: 6.5/10 (Innovation: 6, Technical: 7, Documentation: 8, Utility: 5)

Fengarde is an OCSF-native, Apache-2.0 SIEM pipeline that normalizes IT, AI, and OT telemetry into a single schema, correlates it with sliding-window rules, and produces hash-chained evidence packages with optional local LLM triage. It targets European industrial MSPs with NIS2 draft notification support, combining real detection logic, a rebuilt React console, and a live demo.

Target audience: Security engineers, SOC analysts, DevOps/IT ops at industrial MSPs, NIS2 compliance teams

Repository: https://supermhel.github.io/fengarde/ · Python · Apache-2.0 · 15 stars

View on Hacker News