$git clone https://github.com/Justin0504/AegisEvery tool call. Intercepted. Classified. Blocked — before it executes.
| 1 | <div align="center"> |
| 2 | |
| 3 | # AEGIS |
| 4 | |
| 5 | ### The firewall for AI agents. |
| 6 | |
| 7 | **Every tool call. Intercepted. Classified. Blocked — before it executes.** |
| 8 | |
| 9 | <br> |
| 10 | |
| 11 | [](https://github.com/Justin0504/Aegis/releases/latest) |
| 12 | [](https://github.com/Justin0504/Aegis/releases) |
| 13 | [](https://github.com/Justin0504/Aegis/stargazers) |
| 14 | [](https://opensource.org/licenses/MIT) |
| 15 | [](https://pypi.org/project/agentguard-aegis/) |
| 16 | [](https://www.npmjs.com/package/@justinnn/agentguard) |
| 17 | [](https://github.com/Justin0504/Aegis/pkgs/container/aegis-gateway) |
| 18 | [](https://github.com/Justin0504/Aegis/actions) |
| 19 | |
| 20 | [**Download** →](https://github.com/Justin0504/Aegis/releases/latest) · |
| 21 | [**Roadmap** →](./ROADMAP.md) · |
| 22 | [**Security** →](./SECURITY.md) · |
| 23 | [**Commercial** →](./COMMERCIAL.md) · |
| 24 | [**Contributing** →](./CONTRIBUTING.md) |
| 25 | |
| 26 | </div> |
| 27 | |
| 28 | <br> |
| 29 | |
| 30 | <div align="center"> |
| 31 | |
| 32 | ## Download AEGIS |
| 33 | |
| 34 | <table> |
| 35 | <tr> |
| 36 | <td align="center" width="33%"> |
| 37 | |
| 38 | ### 🍎 macOS |
| 39 | |
| 40 | [<img src="https://img.shields.io/badge/Download_.dmg-Apple_Silicon-0a0a0a?style=for-the-badge&logo=apple&logoColor=white" alt="Download for macOS">](https://github.com/Justin0504/Aegis/releases/latest) |
| 41 | |
| 42 | <sub>`AEGIS_0.1.0_aarch64.dmg` · 164 MB<br>macOS 11+ · Apple Silicon</sub> |
| 43 | |
| 44 | </td> |
| 45 | <td align="center" width="33%"> |
| 46 | |
| 47 | ### 🪟 Windows |
| 48 | |
| 49 | <img src="https://img.shields.io/badge/Coming_in_0.2-Windows-6e6e6e?style=for-the-badge&logo=windows&logoColor=white" alt="Windows coming soon"> |
| 50 | |
| 51 | <sub>`AEGIS_Setup.exe`<br>Windows 10+ · use WSL2 today</sub> |
| 52 | |
| 53 | </td> |
| 54 | <td align="center" width="33%"> |
| 55 | |
| 56 | ### 🐧 Linux |
| 57 | |
| 58 | [<img src="https://img.shields.io/badge/curl_aegistraces.com/install-Linux-0a0a0a?style=for-the-badge&logo=linux&logoColor=white" alt="Install on Linux">](https://aegistraces.com/install) |
| 59 | |
| 60 | <sub>`.deb` · `.AppImage` · `.tar.gz`<br>Ubuntu 22.04+ · Debian 12+ · RHEL 9+</sub> |
| 61 | |
| 62 | </td> |
| 63 | </tr> |
| 64 | </table> |
| 65 | |
| 66 | **Or one line in any terminal:** |
| 67 | |
| 68 | ```bash |
| 69 | curl -fsSL https://aegistraces.com/install | sh |
| 70 | ``` |
| 71 | |
| 72 | <sub>Detects your OS + arch, downloads the verified release, drops the binary in `/usr/local/bin`, ready to run. No git clone. No Docker. No `npm install`.</sub> |
| 73 | |
| 74 | </div> |
| 75 | |
| 76 | --- |
| 77 | |
| 78 | > Your agent just called `DROP TABLE users` because the prompt said "clean up old records." |
| 79 | > Your agent just exfiltrated 2 GB because "the user asked for a report." |
| 80 | > Your agent just ran `rm -rf /` because the model hallucinated a tool name. |
| 81 | > |
| 82 | > **Not hypotheticals.** Every agent framework lets AI decide which tools to call, with what arguments, at machine speed. There is no human in the loop. There is no undo. |
| 83 | > |
| 84 | > AEGIS is the missing layer: a **pre-execution firewall** that sits between your agent and its tools, classifies every call in real time, enforces policies, blocks violations, and writes a tamper-evident audit trail — with **one line of code and zero agent changes.** |
| 85 | |
| 86 | <br> |
| 87 | |
| 88 | <div align="center"> |
| 89 | <img src="docs/images/cockpit/overview.png" alt="AEGIS Compliance Cockpit — Overview" width="820"> |
| 90 | <br> |
| 91 | <sub>The AEGIS Compliance Cockpit — real-time monitoring across all your agents.</sub> |
| 92 | </div> |
| 93 | |
| 94 | --- |
| 95 | |
| 96 | ## See it run |
| 97 | |
| 98 | <div align="center"> |
| 99 | |
| 100 | **A real Claude-powered research assistant, fully integrated with AEGIS.**<br> |
| 101 | Watch it trace tool calls, block SQL injection, detect PII, and pause for human approval — live. |
| 102 | |
| 103 | <img src="docs/images/readme_demo2.gif" alt="Live agent demo" width="820"> |
| 104 | |
| 105 | <br> |
| 106 | |
| 107 | **The Compliance Cockpit: traces, policies, cost tracking, sessions, a |