w5teams/w5

Health v2 · maintenance only

Adoption not part of the score

1548 stars · 247 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

W5 is an open-source, low-code Security Orchestration, Automation and Response (SOAR) platform built in Python with a visual playbook editor. It lets teams wrap systems and tools as APPs and orchestrate them into automated workflows triggered by various triggers, for security operations, DevOps, and automated penetration testing.

Use cases

• automate security alert triage and response without writing code
• build visual security orchestration playbooks
• automate asset scanning and inventory ingestion
• respond to server alerts with automated remediation
• check threat intelligence for suspicious sources
• automate server maintenance across Linux and Windows
• orchestrate DevOps deployment workflows visually

When to choose

• you need a self-hosted SOAR platform with a low-code visual workflow editor
• your team wants automation without heavy coding, including non-developers
• you want to wrap internal tools as reusable apps and chain them into playbooks
• you need security operations automation like alert response and threat detection pipelines

When to avoid

• you need a mature enterprise SOAR with large vendor ecosystems and compliance certifications
• you require a fully code-first automation engine rather than visual playbooks
• you need active rapid development - the project appears to be in maintenance with infrequent releases
• GPL-3.0 licensing is incompatible with your closed-source derivative plans

Facets

application · maturity maintenance

workflow-automation security plugin-system self-hosted developer-tools security self-hosted developer-tools python self-hosted soar low-code security-orchestration playbook incident-response security-automation automation devops web-server linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="w5teams/w5")