Passive digital checks
Observe TLS, headers, DNS, cookies, CORS, and related posture without active probing or disruption.
Authorized security intelligence
See the signal.
See the signal.
Defend the evidence.
Aegis turns authorized digital, physical-privacy, and supply-chain observations into a calm view you can inspect, challenge, and act on — without overstating what was not measured.
01 evidence before claims
02 local-first by default
03 human-controlled actions
Aegis evidence constellation
Four evidence streams converge on one
measured trust view: digital posture, physical privacy, supply chain, and identity.
AEvidence coremeasured · explainable
Digital posturepassive signals
Physical privacybounded confidence
Supply chainprovenance intact
Identity boundaryleast privilege
One surface for the evidence that matters.
Purposeful workflows keep the operator close to the source, the authorization, and the exact limits of each result.
Physical privacy
Run a guided, authorized inspection where confidence and coverage remain separate from severity.
Evidence intake
Choose, drop, paste, and preview bounded UTF-8 OpenAPI, SARIF, CycloneDX, and SPDX documents locally.
Reviewable outputs
Trace findings to their source, preserve provenance, and export artifacts a human can inspect.
A measured path from authorization to action.
1
Authorize the scope
Register the target and affirm the legal right to inspect it. Aegis fails closed when the scope is unclear.
2
Observe without drama
Every result carries evidence, method, severity, confidence, and an honest coverage note.
3
Decide as a human
Use a clear report, history, and export trail to review and act. Aegis prepares; it never silently decides for you.
Trust is a boundary, not a badge.
Aegis is an authorized-only, local-first security product. Current token access is administrator-provisioned for a private instance; self-service signup, recovery, and public multi-tenant identity are not activated.
- ●Source-grounded findings with separate severity and confidence.
- ●No raw source document retention in the assessment store.
- ●State-changing actions require an authenticated, same-origin request.
Authorized-only · evidence-based · point-in-time — Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Assessments stay in this process until it restarts. A theme choice may persist in this browser. Findings are not written to disk unless you export them.