AEGIS

B
B tier on Ransomware Protection SoftwareScore 7.3 · #1 of 22
Android app
Not listed
Free plan
Yes
Runs on
api, Linux, Mac, self-hosted, Web, Windows
github.com
The AEGIS homepage

Summary

AEGIS is a free, open-source cybersecurity defense platform that organizations host themselves to detect, analyze, and respond to threats. Its listed detections cover SQL injection, XSS, path traversal, command injection, brute force, port scans, credential theft, lateral movement, and C2 beacons. The project describes a five-layer detection pipeline and reports an 11/11 detection score, as well as 18-microsecond latency for its middleware layer. Deception tools include SSH and HTTP honeypots, breadcrumb credential traps, and attacker interaction profiling. AI features can use OpenRouter, OpenAI, Anthropic, or Ollama; Sigma rules and playbooks work without an AI API key. The free AGPL-3.0 offering is self-hosted with Docker Compose and is listed for up to 20 nodes, 100 assets, and 3 users. It is described for individuals, homelabs, and small teams. Enterprise adds unlimited nodes, assets, and users, a compliance dashboard for ISO 27001, NIS2, and SOC 2, SAML or OIDC SSO, an SLA, and dedicated support; its price is custom.

Who it is for

The free offering is aimed at individuals, homelabs, and small teams able to self-host. Enterprise is described for companies seeking more scale and advanced features.

What is good

  • Open-source under the AGPL-3.0 license.
  • Sigma rules and playbooks work without an AI key.
  • Includes SSH and HTTP honeypots.
  • Free tier covers up to 20 nodes.
  • Enterprise lists SAML or OIDC SSO.

What to know first

  • Free tier is limited to 3 users.
  • Free tier is limited to 100 assets.
  • Self-hosting requires Docker Compose.
  • Enterprise pricing is custom and not listed.

Verdict

AEGIS combines threat detection with deception tools and self-hosted deployment. The free tier has explicit node, asset, and user caps; Enterprise adds broader scale and support.

AEGIS plans and pricing

All plans
Free · Open Source Free 20 nodes · 100 assets · 3 users alejadxr.github.io · 29 Sept 2026
Enterprise Not published Custom Unlimited nodes, assets, and users · SLA and dedicated support alejadxr.github.io · 29 Sept 2026

Compared on ransomware protection software

Free plan
Yesgithub.com
Rollback or recovery
Yesgithub.com
Behavioral detection
Yesgithub.com
Automatic isolation
Yesgithub.com
EDR included
Yesgithub.com
Deployment
on_premisesgithub.com
Operating system coverage
cross_platformgithub.com

Facts

Purpose
AEGIS is an open-source, self-hosted cybersecurity defense platform for detecting, analyzing, and responding to threats.alejadxr.github.io · 29 Sept 2026
Detection
The site describes a five-layer detection pipeline and reports an 11/11 detection score.alejadxr.github.io · 29 Sept 2026
Response speed
The site reports 18-microsecond detection latency for its middleware layer.alejadxr.github.io · 29 Sept 2026
Threat detection
Listed detections include SQL injection, XSS, path traversal, command injection, brute force, port scans, credential theft, lateral movement, and C2 beacons.alejadxr.github.io · 29 Sept 2026
Deception
AEGIS offers SSH and HTTP honeypots, breadcrumb credential traps, and attacker interaction profiling.alejadxr.github.io · 29 Sept 2026
AI and offline use
The site says AEGIS can use OpenRouter, OpenAI, Anthropic, or Ollama for AI features, while deterministic Sigma rules and playbooks work without an AI API key.alejadxr.github.io · 29 Sept 2026
Integrations
The site names OpenRouter, OpenAI, Anthropic, and Ollama as AI providers and describes shared threat intelligence.alejadxr.github.io · 29 Sept 2026
Self-hosting
The free plan is self-hosted with Docker Compose and the site instructs users to clone the repository and run docker compose.alejadxr.github.io · 29 Sept 2026
Platforms
The free plan includes a dashboard and Rust endpoint agent; the repository says the agent builds for macOS arm64, Linux x64, and Windows x64.github.com · 29 Sept 2026
Security and compliance
Enterprise includes a compliance dashboard for ISO 27001, NIS2, and SOC 2, plus SSO using SAML or OIDC.alejadxr.github.io · 29 Sept 2026
License
AEGIS is offered as open source under the AGPL-3.0 license.github.com · 29 Sept 2026
Free tier limits
The free plan is listed for up to 20 nodes, 100 assets, and 3 users.alejadxr.github.io · 29 Sept 2026
Intended users
The free plan is described for individuals, homelabs, and small teams; Enterprise is for companies seeking advanced features and scale.alejadxr.github.io · 29 Sept 2026
Enterprise support
The Enterprise plan lists an SLA and dedicated support.alejadxr.github.io · 29 Sept 2026

Best AEGIS alternatives

See all 20

Where it ranks on Everything Xiaomi

Is AEGIS yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources