A topology-aware Wazuh SOC analyst agent built on agno. Connects to your Wazuh deployment via ▎ MCP to triage alerts, enumerate attack paths, recommend mitigations, and detect intrusions from ▎ deception-platform telemetry. Available as a CLI and a FastAPI HTTP server.