Argus is a self-hosted, multi-tenant security operations platform in which AI agents analyze evidence but never act on the estate. Collectors inventory cloud, identity, code, endpoint, network and Kubernetes assets into an evidence graph; a detection engine evaluates events for swarm, identity, cloud, code and canary signals; a scope-gated test harness runs authorized security tools; governed agents triage, investigate and hunt with read-only tools; and a separate action broker (typed actions, policy, approvals, dry runs, rollback, kill switch) is the only component allowed to change anything.
This README describes what is in the repository today. docs/ARCHITECTURE.md describes the
design; docs/ROADMAP.md lists what is implemented versus planned.
Argus is an early open-source foundation, meant to be forked and extended. The platform core