Building Argus: A Voice-Driven SOC Copilot with Gemini Live

When a critical alert flashes at 3:00 AM, SOC analysts usually waste precious minutes manually writing SQL and correlating data across disconnected dashboards. In cybersecurity, this manual approach is too slow. What if you could just talk to your logs and share screenshots of anomalies? Argus is a real-time, multimodal SOC AI agent. You can ask it to "show high-severity traffic," or upload a screenshot of a suspicious process, and it instantly queries Google BigQuery, updates device states in Firestore, and pushes live visual updates to a dynamic dashboard—all perfectly synced with its spoken responses. Try It Out YouTube Demo: https://youtu.be/5aQJt5LAPxk Live Web App: https://argus-frontend-215980001921.us-central1.run.app GitHub Repo: https://github.com/pratima-sapkota/argus The Tech Stack Argus relies on a single multiplexed WebSocket connection to stream bidirectional voice and data. AI: Gemini Live API ( gemini-live-2.5-flash-native-audio ) via google-genai Backend: FastAPI, Pyt