Cappy

About

CAPPY is a robust AI-driven investigation assistant designed to dramatically reduce the time spent on security operations cases, slashing investigation times from 20-30 minutes to just 2-3 minutes. It acts as a central meta-orchestrator, streamlining the entire investigation pipeline from initial triage and evidence analysis to hypothesis generation and customer response drafting. Integrating with enterprise systems like JIRA and Confluence, CAPPY utilizes a vast 540-pattern database and enforces rigorous evidence quality through over 30 programmatic validation hooks, transforming complex manual investigations into rapid, efficient, and quality-controlled workflows.

Key Features

• 7 comprehensive MCP Orchestrators covering all investigation phases
• 540-pattern database with confidence-scored diagnostics and causality chains
• 30+ programmatic hook pipeline for validation, PII guarding, and evidence chain tracking
• Isolated container sandbox for secure, untrusted file processing with network isolation
• 3-Tier AI routing (Ollama, Claude, Gemini) for cost optimization and resilience
• 0 GitHub stars

Use Cases

• Generating high-quality, citation-backed customer responses for security cases
• Automating the end-to-end pipeline of security operations investigations
• Rapidly investigating security product incidents and issues