TRiaD

TRiaD (Threat Intelligence & Automated Defense) is an AI-powered cybersecurity incident response platform developed during the Band of Agents Hackathon 2026. The system leverages a collaborative multi-agent architecture to automate the traditionally time-consuming processes of threat analysis, incident triage, intelligence correlation, and compliance reporting. The platform consists of specialized AI agents working together in a coordinated workflow. Incoming security alerts are processed by an ingestion layer, enriched with contextual threat intelligence, and analyzed through semantic similarity searches using a vector database. The analyst agent investigates indicators of compromise, correlates findings with historical incidents and MITRE ATT&CK techniques, and generates actionable insights. A manager agent then compiles compliance-ready incident reports suitable for security operations centers and organizational stakeholders. TRiaD provides a modern web dashboard with real-time updates, interactive alert monitoring, and automated reporting capabilities. By combining FastAPI, Next.js, ChromaDB, Gemini-powered reasoning, and WebSocket-based communication, the platform demonstrates how autonomous AI agents can significantly accelerate cyber defense operations while maintaining transparency, traceability, and auditability. The project showcases practical applications of agentic AI in cybersecurity, threat intelligence automation, incident response orchestration, and security analytics.