Aegis
Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.
Aegis: Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.
Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.
What the project is
Aegis is a JavaScript project hosted on GitHub. Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents. AEGIS OS-level oversight for AI coding agents Open-source monitor that shows what AI coding agents actually do on your machine . at the OS level, no agent hooks required. The repository is maintained by antropos17 and tracks activity through its public issue tracker and commit history. Readers who want a working example rather than a bare library will find the documentation and the linked resources useful for getting a first build running.
What it offers
The Aegis repository documents several concrete capabilities that shape how people use it. Process Monitoring . Tracks 110 known AI agent signatures with parent-child tree resolution and IDE host detection. File System Access . Watches sensitive directories (.ssh, .aws, .gnupg, .env, cloud configs) and 35 registered AI agent config paths for unauthorized access. Network Activity . Logs outbound TCP connections per agent PID with reverse DNS and known-vs-unknown API endpoint classification. Behavioral Analysis . Applies 73 detection rules across 8 categories with rolling 10-session baselines and 4-axis anomaly scoring. Trust Scoring . Assigns real-time risk scores with trust grades (A+ through F) using time-decay algorithms and multi-dimensional threat assessment. These points are taken from the project README, so they reflect what the maintainers actually ship rather than marketing claims. Checking the file list and the example directories gives a fuller picture of how each piece fits together.
How to set it up
Getting Aegis running starts with cloning the source from https://github.com/antropos17/Aegis. The README lists the commands needed to fetch the code and build or launch it. Representative steps from the documentation include: git clone https://github.com/antropos17/Aegis.git npm install npm start npm run build:demo && npm start. After the code is on disk, the project instructions walk through configuration and any dependencies. Following the order shown in the README avoids the common setup mistakes that come from mixing steps.
License and project status
Aegis is written primarily in JavaScript and is released under the MIT license, which sets the terms for reuse and redistribution. The project reports around 143 stars on GitHub, a signal of how many developers have bookmarked it. The source was last updated on 2026-08-21. The canonical location is https://github.com/antropos17/Aegis, where the license file, the changelog and the open issues give the most current state of the work. Anyone planning to depend on it should read the license text directly before shipping it inside another product.
Editorial conclusion
The Aegis source lives at https://github.com/antropos17/Aegis under the MIT license and is mainly written in JavaScript. The README and the linked examples remain the place to confirm the current behaviour before adopting the project.
Community notes