Hand your security alerts to a team of AI specialists and keep the final say on every action. Argus pulls events from cloud, identity, code, endpoint, and Kubernetes sources, runs fifteen detection rules, and turns matches into deduplicated findings enriched with CISA KEV and EPSS scores. Nine specialist agents hunt for evidence, build timelines, estimate blast radius, and propose fixes, but their only write path is a pending request that waits for human approval. Response playbooks can block an attacker or isolate a laptop through a catalog of 27 typed actions, starting in shadow mode with dry runs, caps, automatic rollback, and a tenant kill switch. Plant canary tokens aimed at rogue AI agents, replay eight simulated agent-driven attacks, and route OpenAI and Anthropic traffic through a gateway with model allowlists and budgets. Every step is written to a signed audit chain. A self-hosted command center with roles, TOTP sign-in, and Slack approvals fits small teams that have no SOC of their own. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Point it at your cloud accounts and it returns a ranked list of what is misconfigured, mapped to the standards auditors ask about. Connect providers like AWS, Azure, Google Cloud, Kubernetes, Microsoft 365, and GitHub, launch a scan or schedule recurring ones, and read the results on an overview with a ThreatScore gauge, severity bars, and a resource inventory by category. The Findings page groups failed checks, expands each group into the affected resources, and lets teams mute noise, triage status, send groups to Jira, and create alerts that email or message people after each scan. Compliance pages score every framework from CIS and NIST to PCI DSS, SOC 2, HIPAA, GDPR, and ISO 27001, with a watchlist for the ones you care about and downloadable reports. Attack Paths draws a graph from IAM roles and policies to outcomes like code execution, using a Neo4j graph database filled by AWS scans. A built-in AI assistant answers questions about critical findings and compliance gaps with the model provider you configure. Organizations, roles, and API keys keep access tidy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.