# vigil

Vigil is an open source, agentic AI SOC released under Apache 2.0. Your playbooks are plain-text Markdown files, your agent logic is readable code, and your integrations use an open standard (MCP). It is a capability you own, not a black box you rent.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/vigil-soc-vigil
- Source: https://github.com/Vigil-SOC/vigil
- Price: free and open source

## Summary
vigil is a Claude Code plugin with 12 hand-picked skills, indexed on Flowy in the Security category. Install it with the command on its page. It includes attack-mapping, beaconing-review, executive-summary. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
npx -y skills add Vigil-SOC/vigil --agent claude-code
```

## Skills
- attack-mapping
- beaconing-review
- executive-summary
- findings-and-telemetry
- hunt-method
- investigate-case
- ioc-enrichment
- network-shape
- phishing-triage
- rdp-lateral-movement
- recording-evidence
- threat-intel

## FAQ

### What is vigil?
Vigil is an open source, agentic AI SOC released under Apache 2.0. Your playbooks are plain-text Markdown files, your agent logic is readable code, and your integrations use an open standard (MCP). It is a capability you own, not a black box you rent.

### How do I install vigil?
Run these in Claude Code: npx -y skills add Vigil-SOC/vigil --agent claude-code. Then prompt normally.

### Does vigil auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is vigil free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.