securitylogai 0.1.0

AI-powered security log analysis toolkit

securitylogai

Reusable Python engine for parsing logs, detecting suspicious activity, generating reports, and producing AI explanations.

What it does

• Parse Apache-style logs
• Detect brute-force style patterns
• Generate readable reports
• Produce AI-ready summaries

Install from PyPI

pip install securitylogai

Install from TestPyPI

pip install -i https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple securitylogai

Usage

from securitylogai import parse_apache_log, detect_bruteforce, generate_report, explain_attack

log = "127.0.0.1 - - [30/May/2026:12:00:00 +0630] \"POST /login HTTP/1.1\" 401 532"
event = parse_apache_log(log)
findings = detect_bruteforce([event] * 25)
report = generate_report(findings)
summary = explain_attack(findings[0]) if findings else None

Build and publish

python -m pip install --upgrade build twine
python -m build
python -m twine check dist/*
python -m twine upload dist/*

Publish to TestPyPI first

python -m twine upload --repository testpypi dist/*

Package structure

• parser.py - parse log lines
• detector.py - detect suspicious patterns
• reporter.py - create text reports
• ai.py - AI explanation layer
• utils.py - shared helpers

Roadmap

• add Nginx / SSH / Windows parsing
• add provider adapters for OpenAI, Gemini, Ollama
• add CLI and JSON output
• add tests and release workflow