SIEM Alert Triage Agent
Grouping + LLM JudgeClient-side alert deduplication + a second-opinion LLM judge — advisory only, never an action taken
Paste raw security alert lines (one per line). Near-identical alerts are grouped by a normalized template right here in your browser first — only the grouped summary (never your raw unbounded log) is sent to an LLM judge for a prioritized triage. Advisory only: suggestions for a human analyst, never an action this tool takes itself.