Data / Repositories / Incident response / Python
Python Incident response repositories on GitHub: 4 ranked by stars
4 public Python repositories tagged Incident response are on GitHub, with 8,215 stars between them; 4 had a push in the last 30 days. The most starred: TracecatHQ/tracecat (3,836), HolmesGPT/holmesgpt (3,596), google/mcp-security (532).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|
| TracecatHQ/tracecat | Open-source security automation platform for teams and AI agents | 3,836 | 433 | AGPL-3.0 | Oct 14 | Oct 14 |
| HolmesGPT/holmesgpt | SRE Agent - CNCF Sandbox Project | 3,596 | 525 | Apache-2.0 | Oct 14 | Oct 14 |
| google/mcp-security | 532 | 146 | Apache-2.0 | Oct 6 | Oct 14 | |
| gensecaihq/Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001)… | 251 | 65 | MIT | Oct 9 | Oct 14 |
Other languages
Related topics
- Cybersecurity 4
- Security 4
- MCP 3
- DEVOPS 2
- Kubernetes 2
- Observability 2
- Sre 2
- Awesome list 2
- LLM 2
- Security automation 2
- MCP server 2
- Model Context Protocol 2
Every Incident response repository
Read from GitHub by SpecStream between October 14, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.