Aegis

Independent AI Oversight Layer — monitors what AI agents do on your computer. EDR for AI Agents.

#ai-agents #ai-security #cybersecurity #developer-tools #electron #monitoring #open-source #privacy #ai #desktop-app

AEGIS

EDR for AI Agents

Watches what AI agents do on your machine. Processes, files, network, risk scoring.
No telemetry. No cloud. Everything stays local.

With autonomous agents like OpenClaw (247K+ GitHub stars) gaining access to local files, credentials, and shell — somebody needs to watch.

AEGIS Demo

Download · Report Bug · Feature Request · Contributing

Why AEGIS?

AI agents now have deep access to your machine — files, commands, network. Every existing AI security tool is enterprise SaaS that monitors what humans send to AI. Nobody monitors what AI agents do on local machines.

CrowdStrike, Cisco, and Kaspersky have all flagged security risks in autonomous AI agents. Aegis is the open-source answer.

AEGIS is an independent, open-source monitoring layer. It watches AI agent behavior in real time, doesn't belong to any AI vendor, and keeps all data local.

What It Monitors

Layer	How
Processes	107 known AI agent signatures, parent-child tree resolution, IDE host detection
Files	Watches `.ssh`, `.aws`, `.gnupg`, `.env*`, cloud configs, 27 AI agent config dirs
Network	Outbound TCP per agent PID, reverse DNS, known API endpoints vs unknown
Behavior	Rolling 10-session baselines, 4-axis anomaly scoring (Network/FS/Process/Baseline)
Local LLMs	Ollama, LM Studio, vLLM, llama.cpp runtime detection

How It Compares

	AEGIS	Lasso / Prompt Security / PromptArmor
Runs locally	Yes	Cloud
Open source	MIT	No
Free	Yes	Enterprise
Monitors file access	Yes	No
Detects local LLMs	Yes	No

AEGIS is the only open-source, local-first AI agent monitor.

Download

From Source (all platforms)

git clone https://github.com/antropos17/Aegis.git
cd Aegis
npm install
npm start

Requires Node.js 18+ and npm 9+. Windows 10/11 recommended. macOS/Linux experimental (#37).

Try Without AI Agents

npm run build:demo && npm start

No real AI agents needed — explore the full UI with simulated data.

Windows Installer

Pre-built .exe installer is coming in a future release. Track progress in Releases.

Release History

Version	Date	Highlights
v0.8.0-alpha	2026-03-05	Launch readiness: CSP hardened, OpenClaw integration, README overhaul
v0.7.0-alpha	2026-03-04	YAML rulesets, 68 rules, hot-reload, 568 tests
v0.5.0-alpha	2026-03-03	Fancy UI redesign, VisTimeline, AgentGraph
v0.4.0-alpha	2026-03-03	TypeScript infrastructure, perf, refactoring

Features

Detection — 107 agent signatures, parent chain resolution, config dir protection, per-agent risk scoring with trust grades (A+ through F), HTTP/User-Agent scoring, local LLM detection, false positive marking

Analysis — Behavioral baselines with rolling averages, multi-dimensional anomaly detection, AI threat assessment via Anthropic API (opt-in), printable HTML threat reports

Dashboard — Bento grid dashboard — RiskRing gauge, Sparklines, TrustBadge, agent stats, activity feed with filters, session timeline, agent cards with expandable details, protection presets (Paranoid/Strict/Balanced/Developer), dark/light theme, toast notifications, OOM protection, keyboard shortcuts (Ctrl+1-4)

Export — JSON, CSV, HTML reports, one-click ZIP archive, JSONL audit logging (daily rotation, 30-day retention)

i18n — Internationalization with English base (110+ strings), community translations welcome

CLI — --scan-json for scripting, --version, --help

YAML Rulesets

68 detection rules across 8 categories (AI config, secrets, SSH, cloud, browser, devtools, crypto, certificates)
JSON Schema validated, hot-reload without restart
Extend or override via rules/custom/ directory

Screenshots

📸 Shield — Real-time Overview

📸 Activity Feed

📸 Rules & Permissions

📸 Reports & Export

📸 Agent Statistics

📸 Settings

Architecture

┌─────────────┐    ┌─────────────┐    ┌─────────────┐    ┌─────────────┐
│   Process    │    │    File     │    │   Network   │    │     LLM     │
│   Scanner    │    │   Watcher   │    │   Monitor   │    │  Detector   │
│  (tasklist)  │    │ (chokidar)  │    │ (NetTCP+DNS)│    │(Ollama/LMS) │
└──────┬───────┘    └──────┬──────┘    └──────┬──────┘    └──────┬──────┘
       │                   │                  │                  │
       └───────────┬───────┴──────────┬───────┘                  │
                   │                  │                           │
            ┌──────▼──────┐    ┌──────▼──────┐                   │
            │  Baseline   │    │   Anomaly   │◄──────────────────┘
            │   Engine    │    │  Detector   │
            │(10-session) │    │  (4-axis)   │
            └──────┬──────┘    └──────┬──────┘
                   │                  │
            ┌──────▼──────┐    ┌──────▼──────┐    ┌─────────────┐
            │    Risk     │    │   Audit     │    │     CLI     │
            │   Engine    │    │   Logger    │    │ (--scan-json│
            │(time-decay) │    │  (JSONL/30d)│    │  --version) │
            └──────┬──────┘    └──────┬──────┘    └─────────────┘
                   │                  │
            ┌──────▼──────┐    ┌──────▼──────┐
            │  Dashboard  │    │ ZIP Writer  │
            │ (Svelte IPC)│    │ (export)    │
            └─────────────┘    └─────────────┘

Stack: Electron 33, Svelte 5, Vite 7, TypeScript, Vitest (568 tests across 34 files)

Agent Database

107 agents in src/shared/agent-database.json:

Coding — Claude Code, GitHub Copilot, Cursor, Windsurf, Tabnine, Amazon Q, Cody, Aider Autonomous — OpenClaw, Devin, Manus AI, OpenHands, SWE-Agent, AutoGPT, BabyAGI, CrewAI Desktop — Anthropic Computer Use, Google Gemini, Apple Intelligence, Microsoft Copilot Frameworks — LangChain, Semantic Kernel, AutoGen, MetaGPT, TaskWeaver Local LLMs — Ollama, LM Studio, vLLM, llama.cpp, LocalAI, GPT4All, Jan

Add custom agents via the UI or edit the JSON. See AGENTS.md.