Hi Product Hunt, I built Open Investigator to explore a safer pattern for AI-assisted server incident response. The design choice is simple: AI gets a sealed investigation toolbox, not raw shell and not remediation authority. It can inspect auth, accounts, processes, network, persistence, services, web logs, Java process clues, memory-shell outer indicators, recent files, containers, packages, and command history. Every run creates case artifacts: evidence.jsonl, commands.log, report.json, and report.md. It deliberately does not isolate hosts, block IPs, kill processes, delete files, disable accounts, restart services, or change firewall/registry state. Open-source repo: https://github.com/SEc-123/open-... I would love feedback from incident responders, security engineers, SREs, and people who operate production Linux, Windows, or Java servers.

Open Investigator

Read-only AI server investigation for incident response

Read-only AI server investigation for incident response