Open Source · $0/month

Your AI
SOC Operator

Alert comes in. AI diagnoses in seconds. Ticket created. Team notified. Human approves. System remediates.

Get Started →GitHub ⭐
Live Incident Feedstreaming
db-prod-12s ago
PostgreSQL connections 95% — AI: connection leak detected
k8s-worker-38s ago
Memory 96% — AI: OOMKiller risk, recommend pod restart
cache-prod-215s ago
Redis evictions rising — AI: maxmemory policy review
web-prod-723s ago
✅ Resolved — nginx restarted via SSM (approved by carlos)
🤖

AI Triage

5-model fallback. Structured diagnosis. CLI commands. <5s response.

🎫

Auto Tickets + ChatOps

Zoho/Jira/ServiceNow. Slack+Discord. Severity routing. Dedup.

🔧

Human-in-the-Loop

Approve → SSM executes. Never auto-runs. Full audit trail.

Try it — Paste an alertReady
Click "Triage" to see AI diagnosis →
Supported Sources
PrometheusCloudWatchNagiosIcinga2ZabbixInstanaDatadogGrafanaPRTGGeneric

+ any tool with HTTP webhooks

Built With
⚡ Cloudflare Workers
🗄️ D1 (SQLite edge)
🧠 OpenRouter (free LLMs)
🔌 MCP native
📊 Astro dashboard
🐍 Python MCP server

Total cost: $0/month

Deploy in 5 Minutes

$ git clone remo-api && npx wrangler deploy
Read the Docs →See Pricing

See It In Action

terminal
$ curl -X POST api.remo.sofe.dev/ingest \
-H "X-Webhook-Secret: whsec_nagios_xxx" \
-d '{"host":"db-1","state":"CRITICAL","output":"CPU 98%"}'
{
"status": "triaged",
"severity": "high",
"diagnosis": "CPU spike likely caused by runaway query...
blocking other connections for 12 minutes",
"probable_cause": "Long-running analytical query without LIMIT",
"recommended_actions": [
"SELECT pid, query FROM pg_stat_activity ORDER BY duration DESC",
"SELECT pg_terminate_backend(pid) WHERE duration > '10 min'"
],
"confidence": 0.91
}

How Remo Works

📥
Alert Arrives
Any source, any format.
Zero agents needed.
🤖
AI Diagnoses
5-model fallback chain.
Structured diagnosis in <5s.
✅
Human Resolves
Approve → SSM executes.
Full audit trail.

Everything a SOC Needs

From alert ingestion to remediation — one tool, zero cost.

🤖

AI Triage

5-model fallback chain (nvidia 120B → llama 70B → qwen → nano → gpt-oss). Structured JSON: diagnosis, cause, impact, CLI commands. Confidence scoring.

🎫

Auto Tickets

Zoho Desk (free), Jira, ServiceNow. Tickets created automatically with full AI diagnosis as HTML body. OAuth2 auto-refresh.

📣

ChatOps

Slack Block Kit + Discord Embeds. Severity-based routing. 5-min dedup window. Escalation badges.

🔧

Remediation

Human-in-the-loop. Approve → AWS SSM executes on client EC2. Cross-account via AssumeRole. Never auto-runs.

🔌

MCP Native

`pip install remo-oss` (local) or connect remote via SSE (mcp.remo.sofe.dev). 6 tools for any AI agent framework.

📊

Dashboard

Astro + React islands. Dark mode. Auto-refresh 30s. Filters, search, MTTR metrics. Acknowledge + resolve from UI.

Works With Your Stack

If it can send HTTP, Remo can triage it. Zero agents, zero plugins, zero per-host fees.

PrometheusAWS CloudWatchNagiosIcinga2ZabbixIBM InstanaDatadogGrafanaPRTGSlackDiscordZoho Desk

+ any monitoring tool that supports webhook notifications

Deploy in 5 Minutes

# Clone & deploy (requires free Cloudflare account)
git clone https://github.com/breakingthecloud/remo-api
cd remo-api && npm install
npx wrangler login
npx wrangler d1 create remo-incidents
npx wrangler deploy
# Send your first alert
curl -X POST https://your-worker.workers.dev/ingest \
-H "X-Webhook-Secret: whsec_xxx" \
-d '{"source":"nagios","host":"db-1","state":"CRITICAL"}'

Total infrastructure cost: $0/month. Forever.

Ready to Ship Your SOC?

From zero to AI-powered incident triage in under 10 minutes.

Get Started Free →Try the Dashboard