← back to case studies
Repeatable triage automationInternal

Claude-based security triage

Repeatable Claude-based triage automation for security incidents and discovery findings at OpenObserve.

ClaudeAnthropic SDKOpenObserve
architecturescroll to pan →
Incidentssecurity eventsFindingsdiscoveryClaude triageAnthropic SDKvalidateStructured outputstrict validation

Problem

Security incidents and discovery findings arrive faster than a team can triage them by hand. The repetitive first pass of classification and context-gathering is the bottleneck.

My role

Built repeatable Claude-based triage automation for security incidents and discovery findings.

What shipped

  • +Repeatable triage automation over security incidents and discovery findings
  • +Grounded in the Anthropic SDK with structured, validated output

Outcome

  • →Repeatable first-pass triage over incidents and findings
← All case studies