ARGUS — Open-source security operations
Security operations / Open source
Self-hosted · MIT licensed
Agents that detect, investigate and respond to attacks.
One open-source platform to monitor your infrastructure, detect attacks, investigate with AI agents and respond through controlled, reversible actions.
Your infrastructure·Your data·Your control
**How ARGUS handles a threat**
Built-in controls for every response
Policy-governed
01
**Detect**Cloud, identity, code, endpoint and network signals
Telemetry
02
**Investigate**Read-only AI specialists connect evidence
Read only
03
**Authorize**Scope, policy, approvals and dry-run checks
Policy
04
**Respond**Reversible action with a signed audit trail
Reversible
AI specialists
7
Read-only investigations
Typed actions
27
Policy-checked responses
Detection rules
13
Built-in threat detection
Attack scenarios
8
Sandbox simulation
Everything needed to secure the agentic stack.
Comprehensive coverage. No lock-in.
Cloud, identity, GitHub, Kubernetes, endpoints and network in one view.
Specialist agents investigate threats with read-only tools.
Dry runs, Slack approvals, limits, kill switches and rollback.
Manage model access, budgets, DLP and shadow AI discovery.
Authorized pentesting, agent canaries and sandbox attacks.
Signed audit chain, encrypted backups and control mappings.