AI SECURITY SIDECAR
Aegis
Inline threat interception for AI agents.
0.71 ms overhead. One zip. No YAML.
PLATFORM
Classifiers score text. Aegis binds the tool call.
A Rust data plane sits in-line with LLM traffic. A Python control plane owns policy, Crucible, and compliance — never the hot path.
Sidecar 403
Allowlist, RBAC, sequence, intent, signatures, HITL, and flow/taint. Deny is HTTP 403 — the request is never forwarded.
Kernel EPERM
On Aegis Node, an LSM grant ticket refuses open / exec / connect outside what the tool call declared.
Signed evidence
Ed25519 decision records, and on Linux a warrant: declared path versus observed syscall. No mocks.
Crucible
Synthetic canaries (injection, eBPF write, overflow) hit Forge. A slip auto-promotes into the live signature set.
Flow / taint
PCI, PII, and secret-shaped reads cannot sink via HTTP, email, or shell. Allowlists cannot express this.
Command Deck
Forge, live SOC kernel telemetry, HITL holds, intel drop, and Compliance (declared vs observed) ship in the zip.
EVIDENCE
For and not for.
For
- Teams running OpenAI-compatible agents who can point the SDK at a sidecar
- Prompts stay on your network — Stripe never sees them
- Docker Desktop for sidecar 403s
- Ubuntu 24.04 VM for kernel EPERM (BPF LSM)
- Anyone who wants a tamper-evident audit trail with zero SDK edits
Not for
- FedRAMP / ATO or FIPS 140 requirements
- HA multi-region deployments
- Expecting syscall blocks on Docker Desktop WSL
- Skip the proxy — Aegis never runs if you bypass the sidecar
- Not a classifier — it binds the tool call, not the content score
SETUP
Three steps to protected.
Download & start
Same zip for every plan. No account required to run.
# Windows AEGIS Suite.bat # macOS / Linux ./start.sh
Point your agent at the sidecar
One env var. Works with OpenAI, Claude, Gemini, Groq, Grok, Mistral, Azure, and any OpenAI-compatible API.
# Python
import openai
client = openai.OpenAI(base_url="http://127.0.0.1:8080/v1")
# Node.js
const openai = new OpenAI({ baseURL: "http://127.0.0.1:8080/v1" })
# Env var
OPENAI_BASE_URL=http://127.0.0.1:8080/v1Kernel node (optional, Linux only)
Copy the same unzipped folder onto Ubuntu 24.04 — Multipass, a cloud image, or an existing VM. Not Docker Desktop WSL.
# Multipass appliance ./appliance/multipass-launch.sh # or existing Ubuntu 24.04 ./start-node.sh
Upgrade to enforce
Free Audit Mode logs everything. A paid key flips live 403s and kernel EPERM in-app — no reinstall, no redownload.
PRICING
Three plans. Same zip. 14-day trial on every tier.
$19/mo · billed $190/yr
- ✓14-day trial, card on file
- ✓Live HTTP 403 blocks
- ✓Kernel EPERM (Aegis Node)
- ✓Command Deck dashboard
- ✓Ed25519 decision records
$79/mo · billed $790/yr
- ✓Everything in Builder
- ✓5 licensed nodes
- ✓RBAC + sequence + intent
- ✓Crucible canary forge
- ✓Flow / taint (PCI, PII)
$199/mo · billed $1,990/yr
- ✓Everything in Standard
- ✓25 licensed nodes
- ✓Air-gapped signed intel + CRL
- ✓Guided 30-day POC via sales
- ✓Priority support
Payments by Stripe. Aegis never stores cards. Air-gapped zip ships on every plan. Same download — node cap differs. Terms · Privacy