[ SECURITY CAPABILITIES ]

The Argus Defensive Suite

Detailed technical capabilities, deployment architecture, and API samples for our core security products.

Coming Soon

Argus ProxyLB

SOCKS5 Load-Balancing Proxy in Go

Argus ProxyLB is a production-ready SOCKS5 load-balancing proxy written in Go. It accepts multiple simultaneous client connections and routes them through a pool of upstream SOCKS5 proxies using a configurable, pluggable ranking system.

  • Accepts multiple simultaneous SOCKS5 client connections
  • Intelligent routing through an upstream SOCKS5 proxy pool
  • Configurable, pluggable ranking based on latency and health
  • Chained instances to build multi-tier routing hierarchies
Pre-Order ProxyLB License

// proxy routing architecture

SOCKS5 Clients
β†’
Argus ProxyLB
β†’
Upstream Pool
PROXYLB STATUS CHECK CLI
proxylb --config /etc/proxylb/config.json --status
// STATUS OUTPUT:
Active Client Connections: 142
Upstream SOCKS5 Proxies: 8 active / 10 total
Current Routing Strategy: ranked (RTT + Success Rate)
Health Check: All systems nominal (Status: ACTIVE)
Coming Soon

Argus Vault

Distributed Backup Storage Platform by Argus Security

Argus Vault is a secure, distributed backup storage platform. It segregates, compresses, and replicates backup data using zero-knowledge encryption directly to Usenet and cloud providers.

πŸ” Secure distributed backup storage
πŸ”„ Automatic file deduplication (SHA-256)
πŸ“¦ Intelligent file chunking
🌐 Multi-provider redundancy
πŸš€ Real-time upload progress (HTMX)
πŸ“₯ Usenet Recovery: Server-side file reassembly and verification
⚑ Streaming Proxy: Download files directly from Usenet without server storage
🩺 Self-Healing: Automatic article retention monitoring and republishing
πŸ”— Shareable download links & NZB email delivery
πŸ“Š Storage & Bandwidth analytics
Pre-Order Vault License
VAULT UPLOAD CONSOLE CLI
vault upload --file db_backup.tar.gz --redundancy 3
// OUTPUT LOGS:
Calculating SHA-256 hash... 2a71ac551...
Checking deduplication registry... [NO DUPES FOUND]
Deduplicating & Chunking file... 8 blocks generated
Replicating chunks to Usenet & Redundant Targets...
Progress [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] 100% (Real-time HTMX update)
Reassembly & NZB configuration completed. (Status: SECURE)
Available Now

Argus Shield

High-Performance WAF Reverse Proxy in Go

Argus Shield is a high-performance Web Application Firewall (WAF) reverse proxy data plane written in Go. Designed to inspect and filter HTTP traffic at line rates, it sits as a defensive barrier in front of your applications, protecting them against exploit payloads, malicious bots, and data leaks.

πŸ›‘οΈ Real-time Request Payload Filtering (OWASP CRS compliant)
πŸ€– Cryptographic Proof-of-Work JS Challenge Bot Mitigation
🌍 ASN & Country Gating via GeoIP databases
πŸ’¨ Dual-layer Token-Bucket Rate Limiter (Redis + In-Memory Fallback)
⚑ Zero-downtime YAML Rule Hot-reloads (`fsnotify` configuration watcher)
πŸ” Outbound Data Leak Prevention (DLP) Response Scanning
πŸ”‘ Native `argus-license` Go SDK feature-gating & tier compliance
πŸ“ˆ Unified Django Management Dashboard for stats, logging & rule edits

// waf defensive pipeline

🌐 Public Internet (Clients) β†’
πŸ”’ Pangolin (TLS Term) & Ingress β†’
πŸ›‘οΈ Argus Shield WAF (Go Data Plane) β†’
🐳 Protected Microservices (Upstreams) Nominal
WAF DYNAMIC YAML RULE CONFIG YAML
id: xss-prevention-policy
name: "Block Cross-Site Scripting Attacks"
action: BLOCK
conditions:
  - parameter: REQUEST_BODY
    match_regex: "(?i)<script|javascript:|onerror="
  - parameter: HEADERS
    match_key: "User-Agent"
    match_regex: "sqlmap|nikto|nmap"
// FSNOTIFY WATCHER TRIGGER:
[2026-05-28T15:28:44Z] [watcher] Rules modified: rules.yaml
[2026-05-28T15:28:44Z] [watcher] Compiling and reloading configuration...
[2026-05-28T15:28:44Z] [WAF] Reload complete. 48 rules compiled successfully.
Available Now

Argus Sentinel

High-Throughput SIEM Ingestion & Event Correlation in Go

Argus Sentinel is a cloud-native Security Information and Event Management (SIEM) data plane written in Go, paired with a web management interface in the Argus Security Portal. Designed to ingest logs via standard Syslog, HTTP webhooks, and stdin at rates exceeding 100k events/sec, it filters, normalizes, enriches, and correlates events in real-time to detect threats and escalate them into actionable security incidents.

πŸ“Š Real-time Syslog & HTTP Webhook Log Ingestion
🧬 Multi-Format Parser Auto-Detection (JSON, KV, Syslog, Raw Text)
πŸ—ΊοΈ Dynamic Enrichment (MaxMind GeoIP location, caching DNS resolver)
πŸ’Ύ Timed pgx.Batch PostgreSQL event storage persistence
πŸ”„ Real-time Redis-backed Correlation Rule Synchronization
πŸ’Ό Incident Cases & Analyst notes timeline triage
πŸ”‘ Native `argus-license` Go SDK feature-gating & tier compliance
πŸ“ˆ High-Impact Solarized Dark Management Dashboard & Timeline

// SIEM correlation pipeline

πŸ”Œ Log Sources (Syslog/Webhook/Stdin) β†’
πŸ›‘οΈ Argus Sentinel Ingest (Go Pipeline) β†’
πŸ’Ύ Timed pgx.Batch Storage (Postgres DB) β†’
πŸ“ˆ Django Analyst Portal (Triage & Case Mgmt) Sync
SIEM REDIS REAL-TIME RULE SYNC JSON
"event": "save"
"rule": {
  "id": "signals-rule-uuid",
  "name": "Brute Force Logins",
  "rule_type": "threshold",
  "conditions": {"match": {"category": "auth"}},
  "threshold_count": 10,
  "time_window_seconds": 300,
  "alert_severity": "high"
}
// REDIS CHANNEL PUB/SUB SYNC:
[2026-05-28T15:28:44Z] [Redis] Rule compiled: 'Brute Force Logins'
[2026-05-28T15:28:44Z] [Redis] Publishing saved rule to 'sentinel:rules:sync'...
[2026-05-28T15:28:44Z] [SIEM Engine] Rules hot-reload synchronized successfully.
Available Now

Argus Crypt

Key Management Service (KMS) & Secrets Vaulting

Argus Crypt is an enterprise-grade Key Management Service (KMS) and cryptographic data plane. It provides secure envelope encryption, cryptographically-secure token generation, automatic key rotation schedules, and a zero-knowledge hardware security module (HSM) fallback to store secrets safely.

πŸ”‘ RSA, ECDSA, and AES-GCM Key Generation & Management
πŸ”„ Automated Key Rotation Policies & Version Lifecycle tracking
πŸ” Secure Envelope Encryption APIs for client application data
πŸ—„οΈ Zero-knowledge Secrets Store with granular access control policies
⚑ Ultra-low Latency encryption/decryption endpoint in Go
βš™οΈ SoftHSM2 / PKCS#11 Integration support for hardware backing
ENVELOPE ENCRYPTION REQUEST JSON
POST /api/v1/keys/app-key-v1/encrypt
{
  "plaintext": "dGhlc2VjcmV0ZGF0YQ=="
}

RESPONSE:
{
  "ciphertext": "eyJhcmctY3J5cHQiOiAiQjE0QzM4QSJ9...",
  "key_version": 2
}
// KMS ENGINE STATUS:
[2026-05-28T15:28:44Z] [KMS] Key loaded: app-key-v1 (Version: 2)
[2026-05-28T15:28:44Z] [KMS] Cryptographic operation succeeded.
[2026-05-28T15:28:44Z] [SoftHSM2] Hardware backing synchronized (Slot: 1).
Pre-release

Argus Recon

Argus Recon models your as-built network, shows what can reach what, and governs firewall policy changes from request to verification. The Core is free with no device limit and never phones home. Paid packs add analysis, governance, change automation and scale.