Registry › Compare › AiSOC vs REA

AiSOC vs REA

Both are Grade A and 1.9 points apart, so choose on what you weigh most. AiSOC leads on supply-chain integrity; REA leads on adoption.

A AiSOC 84.9

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

beenuar/AiSOC · #93 overall · #3 Security & Guardrails · coverage B (3/5)

Choose AiSOC if supply-chain integrity matters most.

+1.3Safety / Integrity: 63% of recent commits signed, against 41%

A REA 86.8

Reverse engineer anything with agents, from app behavior down to native binaries.

morluto/rea · #64 overall · #2 Security & Guardrails · coverage B (3/5)

Choose REA if adoption matters most.

+3.7Adoption: 1.3k weekly downloads against 316

Where they differ

17.6

Safety / IntegrityAiSOC +1.3

16.3

13.3

TransparencyAiSOC +0.2

13.1

11.4

AdoptionREA +3.7

15.1

+4.6

Runtime calibrationAiSOC +0.3

+4.3

2 dimensions identical: Identity 18.0 · Maintenance 20.0 · Full evidence table

An independent, evidence-based trust comparison of AiSOC and REA, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	AiSOCbeenuar/AiSOC	REAmorluto/rea
HVTrust score	84.9	86.8
Evidence grade	A	A
Coverage grade	B	B
Overall rank	#93	#64
Rank in Security & Guardrails	#3	#2
GitHub stars	2.4k	34.9k
Last updated	today	today
Build provenance	Yes	Yes
OSSF Scorecard	5.6 / 10	5.4 / 10
License	MIT	MIT
Downloads	316/wk	1k/wk
Trust dimensions (points earned)
Safety / integrity / 25	17.6	16.3
Identity & provenance / 18	18.0	18.0
Transparency / 17	13.3	13.1
Maintenance / 20	20.0	20.0
Adoption / 20	11.4	15.1
Runtime capability surface (full matrix)
MCP server	Implemented	Implemented
External providers	—	—
Requires API keys	Yes	No
Plugin surface	plugins	extensions
Provenance drift	Match	Match

Open in the live compare tool → AiSOC profile REA profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →