Skip to main content
Glama

Related Servers

Alternatives to RSigma

  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that provides Sigma rule validation and configuration capabilities for AI assistants. It enables users to validate Sigma detection rules against various validators and manage validator configurations through MCP tools and resources.
    4
    MIT

Related Servers

  • A
    license
    A
    quality
    A
    maintenance
    Sigma detection rule writing, validation, and pySigma-based multi-backend conversion (Splunk, Elastic, Wazuh, Kibana) via 3 MCP tools and 3 Claude Code skills, backed by a 61-rule production corpus across 11 MITRE ATT\&CK tactic categories.
    3
    2
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    An MCP server that exposes a 60+ tool security and threat-intel stack to AI agents, enabling secret scanning, Sigma rule generation, ransomware lookup, OSINT, and deep research.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Real security scanners for AI coding agents — SAST (441 rules), secret detection (419+ patterns), dependency CVEs (OSV.dev), MCP/skill vetting, MITRE ATT&CK. Open-source, Rust, free
    6 npm
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    MCP server exposing rlg (RustLogs) log files as tools for on-call / SRE agent workflows. Three tools over JSON-RPC stdio — tail_log (last N events, filtered by level/target), filter_log (predicate filtering), summarize_errors (grouped error taxonomy). Pure Rust. MIT OR Apache-2.0.
    3
    6
    Apache 2.0

TDQS

A4/5.0

Scored across 15 tools

Disambiguation4/5

Most tools have clearly distinct purposes across parsing, validation, linting, conversion, evaluation, and pipeline inspection. The closest overlaps are lint_rules/fix_rules/validate_rules and test_exemplars/evaluate_events, but the descriptions give enough detail to distinguish their specific roles.

Naming Consistency5/5

All tool names use snake_case with a verb-first pattern such as fix_rules, list_backends, parse_rule, and convert_rules. Minor noun variations like list_builtin_pipelines are still consistent with the overall convention.

Tool Count5/5

Fifteen tools is within a reasonable range for a comprehensive Sigma rule toolkit and each tool covers a distinct stage of the rule lifecycle. No tool appears redundant or purely filler.

Completeness5/5

The surface covers parsing, validation, linting, auto-fixing, conversion to/from backend queries, event evaluation, exemplar testing, ADS scaffolding, tuning, and inspection of fields, backends, and pipelines. This gives full lifecycle coverage for Sigma rule authoring and analysis, with no obvious dead ends.

Maintenance

ActivityActive
ResponsivenessResponsive