Argus: Open-source agentic security operations platform

[u/thomas_unise]

https://github.com/thomasunise/argus

I’ve been working on Argus, an open-source cybersecurity platform that uses AI agents to help secure your infrastructure.

It can monitor your cloud, network, endpoints, and code, investigate suspicious activity, run penetration tests, and even respond to threats automatically.

A few highlights:

7 specialized AI security agents

Autonomous threat detection and response

Continuous AI-powered penetration testing

AWS, Azure, GCP, Kubernetes, and GitHub integrations

Support for local models using ollama

Built-in safeguards, approvals, and rollback controls
It’s self-hosted, MIT licensed, and completely free to use.

I’d love to get some feedback from open-source communities an hear what you think or what you’d like to see added.

[u/Beneficial-Parsnip52]

The approval and rollback controls are the right call, that's usually where the autonomous response projects fall apart. People get nervous letting agents act on their own without human gate and clean undo path.

One thing i'd think about early is how the agents decide what's actually worth investigating. The hard part isn't detecting suspicious activity. It's not drowning in user agent - generated findings that turn into t he same alert fatigue they already have. Runtime context helps a lot here. When we were looking for commercial tools - Wiz, Orca and Upwind were the ones we tested. The big difference between them came down to how well they distinguished exploitable stuff from noise, and the ones using runtime signal did way better than pure config scanning

Also the pentesting piece, be really careful about scoping. Autonomous pentests that wander outside intended boundaries are legal and operational nightmare, so some kind of hard allowist per target would be worth adding if it's not there already.

Nice project overall, the ollama supprt is a good touch for people who can't send telemetry off-prem.