[ SECURITY CAPABILITIES ]

The Argus Defensive Suite

Detailed technical capabilities, deployment architecture, and API samples for our core security products.

Coming Soon

Argus ProxyLB

SOCKS5 Load-Balancing Proxy in Go

Argus ProxyLB is a production-ready SOCKS5 load-balancing proxy written in Go. It accepts multiple simultaneous client connections and routes them through a pool of upstream SOCKS5 proxies using a configurable, pluggable ranking system.

  • Accepts multiple simultaneous SOCKS5 client connections
  • Intelligent routing through an upstream SOCKS5 proxy pool
  • Configurable, pluggable ranking based on latency and health
  • Chained instances to build multi-tier routing hierarchies
Pre-Order ProxyLB License

// proxy routing architecture

SOCKS5 Clients
β†’
Argus ProxyLB
β†’
Upstream Pool
PROXYLB STATUS CHECK CLI
proxylb --config /etc/proxylb/config.json --status
// STATUS OUTPUT:
Active Client Connections: 142
Upstream SOCKS5 Proxies: 8 active / 10 total
Current Routing Strategy: ranked (RTT + Success Rate)
Health Check: All systems nominal (Status: ACTIVE)
Coming Soon

Argus Vault

Distributed Backup Storage Platform by Argus Security

Argus Vault is a secure, distributed backup storage platform. It segregates, compresses, and replicates backup data using zero-knowledge encryption directly to Usenet and cloud providers.

πŸ” Secure distributed backup storage
πŸ”„ Automatic file deduplication (SHA-256)
πŸ“¦ Intelligent file chunking
🌐 Multi-provider redundancy
πŸš€ Real-time upload progress (HTMX)
πŸ“₯ Usenet Recovery: Server-side file reassembly and verification
⚑ Streaming Proxy: Download files directly from Usenet without server storage
🩺 Self-Healing: Automatic article retention monitoring and republishing
πŸ”— Shareable download links & NZB email delivery
πŸ“Š Storage & Bandwidth analytics
Pre-Order Vault License
VAULT UPLOAD CONSOLE CLI
vault upload --file db_backup.tar.gz --redundancy 3
// OUTPUT LOGS:
Calculating SHA-256 hash... 2a71ac551...
Checking deduplication registry... [NO DUPES FOUND]
Deduplicating & Chunking file... 8 blocks generated
Replicating chunks to Usenet & Redundant Targets...
Progress [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] 100% (Real-time HTMX update)
Reassembly & NZB configuration completed. (Status: SECURE)
Available Now

Argus Shield

High-Performance WAF Reverse Proxy in Go

Argus Shield is a high-performance Web Application Firewall (WAF) reverse proxy data plane written in Go. Designed to inspect and filter HTTP traffic at line rates, it sits as a defensive barrier in front of your applications, protecting them against exploit payloads, malicious bots, and data leaks.

πŸ›‘οΈ Real-time Request Payload Filtering (OWASP CRS compliant)
πŸ€– Cryptographic Proof-of-Work JS Challenge Bot Mitigation
🌍 ASN & Country Gating via GeoIP databases
πŸ’¨ Dual-layer Token-Bucket Rate Limiter (Redis + In-Memory Fallback)
⚑ Zero-downtime YAML Rule Hot-reloads (`fsnotify` configuration watcher)
πŸ” Outbound Data Leak Prevention (DLP) Response Scanning
πŸ”‘ Native `argus-license` Go SDK feature-gating & tier compliance
πŸ“ˆ Unified Django Management Dashboard for stats, logging & rule edits

// waf defensive pipeline

🌐 Public Internet (Clients) β†’
πŸ”’ Pangolin (TLS Term) & Ingress β†’
πŸ›‘οΈ Argus Shield WAF (Go Data Plane) β†’
🐳 Protected Microservices (Upstreams) Nominal
WAF DYNAMIC YAML RULE CONFIG YAML
id: xss-prevention-policy
name: "Block Cross-Site Scripting Attacks"
action: BLOCK
conditions:
  - parameter: REQUEST_BODY
    match_regex: "(?i)<script|javascript:|onerror="
  - parameter: HEADERS
    match_key: "User-Agent"
    match_regex: "sqlmap|nikto|nmap"
// FSNOTIFY WATCHER TRIGGER:
[2026-05-28T15:28:44Z] [watcher] Rules modified: rules.yaml
[2026-05-28T15:28:44Z] [watcher] Compiling and reloading configuration...
[2026-05-28T15:28:44Z] [WAF] Reload complete. 48 rules compiled successfully.
Available Now

Argus Sentinel

High-Throughput SIEM Ingestion & Event Correlation in Go

Argus Sentinel is a cloud-native Security Information and Event Management (SIEM) data plane written in Go, paired with a web management interface in the Argus Security Portal. Designed to ingest logs via standard Syslog, HTTP webhooks, and stdin at rates exceeding 100k events/sec, it filters, normalizes, enriches, and correlates events in real-time to detect threats and escalate them into actionable security incidents.

πŸ“Š Real-time Syslog & HTTP Webhook Log Ingestion
🧬 Multi-Format Parser Auto-Detection (JSON, KV, Syslog, Raw Text)
πŸ—ΊοΈ Dynamic Enrichment (MaxMind GeoIP location, caching DNS resolver)
πŸ’Ύ Timed pgx.Batch PostgreSQL event storage persistence
πŸ”„ Real-time Redis-backed Correlation Rule Synchronization
πŸ’Ό Incident Cases & Analyst notes timeline triage
πŸ”‘ Native `argus-license` Go SDK feature-gating & tier compliance
πŸ“ˆ High-Impact Solarized Dark Management Dashboard & Timeline

// SIEM correlation pipeline

πŸ”Œ Log Sources (Syslog/Webhook/Stdin) β†’
πŸ›‘οΈ Argus Sentinel Ingest (Go Pipeline) β†’
πŸ’Ύ Timed pgx.Batch Storage (Postgres DB) β†’
πŸ“ˆ Django Analyst Portal (Triage & Case Mgmt) Sync
SIEM REDIS REAL-TIME RULE SYNC JSON
"event": "save"
"rule": {
  "id": "signals-rule-uuid",
  "name": "Brute Force Logins",
  "rule_type": "threshold",
  "conditions": {"match": {"category": "auth"}},
  "threshold_count": 10,
  "time_window_seconds": 300,
  "alert_severity": "high"
}
// REDIS CHANNEL PUB/SUB SYNC:
[2026-05-28T15:28:44Z] [Redis] Rule compiled: 'Brute Force Logins'
[2026-05-28T15:28:44Z] [Redis] Publishing saved rule to 'sentinel:rules:sync'...
[2026-05-28T15:28:44Z] [SIEM Engine] Rules hot-reload synchronized successfully.
Available Now

Argus Crypt

Key Management Service (KMS) & Secrets Vaulting

Argus Crypt is an enterprise-grade Key Management Service (KMS) and cryptographic data plane. It provides secure envelope encryption, cryptographically-secure token generation, automatic key rotation schedules, and a zero-knowledge hardware security module (HSM) fallback to store secrets safely.

πŸ”‘ RSA, ECDSA, and AES-GCM Key Generation & Management
πŸ”„ Automated Key Rotation Policies & Version Lifecycle tracking
πŸ” Secure Envelope Encryption APIs for client application data
πŸ—„οΈ Zero-knowledge Secrets Store with granular access control policies
⚑ Ultra-low Latency encryption/decryption endpoint in Go
βš™οΈ SoftHSM2 / PKCS#11 Integration support for hardware backing
ENVELOPE ENCRYPTION REQUEST JSON
POST /api/v1/keys/app-key-v1/encrypt
{
  "plaintext": "dGhlc2VjcmV0ZGF0YQ=="
}

RESPONSE:
{
  "ciphertext": "eyJhcmctY3J5cHQiOiAiQjE0QzM4QSJ9...",
  "key_version": 2
}
// KMS ENGINE STATUS:
[2026-05-28T15:28:44Z] [KMS] Key loaded: app-key-v1 (Version: 2)
[2026-05-28T15:28:44Z] [KMS] Cryptographic operation succeeded.
[2026-05-28T15:28:44Z] [SoftHSM2] Hardware backing synchronized (Slot: 1).