blitzcrieg1

blitzcrieg1/agentmetry

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

15 good first / help-wanted issues · Python · last activity Jul 14, 2026

1 stars 0 forks 1 watchers Python Apache License 2.0
agent-monitoring agentmetry ai-agents ai-security audit-log claude-code cursor devsecops dlp llm-security local-first mcp mitre-attack observability security-tools self-hosted siem threat-detection
15 Open Issues Need Help Last updated: Jul 14, 2026

Open Issues Need Help

View All on GitHub
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement good first issue
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue dlp-rule
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue dlp-rule
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement good first issue
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue detection-rule
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement help wanted
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
documentation good first issue
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
enhancement good first issue
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue detection-rule
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection
good first issue detection-rule
blitzcrieg1/agentmetry
1

Agentmetry — a local-first SIEM and flight recorder for AI coding agents. Captures every tool call, approval, and denial from Cursor, Claude Code, Codex and Antigravity into a MITRE ATT&CK-mapped audit trail, with correlated sequence detection (credential access -> network egress) and forwarders to Loki, Elastic and Splunk. Apache-2.0. Zero egress.

Python
#agent-monitoring#agentmetry#ai-agents#ai-security#audit-log#claude-code#cursor#devsecops#dlp#llm-security#local-first#mcp#mitre-attack#observability#security-tools#self-hosted#siem#threat-detection