https://aegisgatesecurity.io/Recent content in Secure Every AI Interaction on AegisGate — Secure Every AI InteractionHugo -- gohugo.ioen-usMon, 21 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/deprecated/Fri, 21 Aug 2026 00:00:00 +0000https://aegisgatesecurity.io/deprecated/noindex: true AegisGate v1.x — End of Life The original AegisGate repository (aegisgatesecurity/aegisgate) has been archived and deprecated as of August 2026. All active development has moved to aegisgatesecurity/aegisgate-platform, a ground-up rewrite with significant improvements: What changed v1.x (legacy) v4.x (current) Single-process proxy Modular platform with dashboard, analytics, MCP support Basic pattern matching 31 compliance frameworks, 2,043 controls, 1,457 automated CLI-only configuration Guided Setup wizard, deploy profiles, config validation No UI Full web dashboard with compliance, maintenance, and system health Limited framework support Community (4) + Developer (6) + Professional (16) + Enterprise (5) Manual compliance reporting 4 automation methods with cross-framework mapping What you should do If you’re a new user: Start with aegisgate-platform and follow the Getting Started guide.https://aegisgatesecurity.io/lens/privacy/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/privacy/🛡️ AegisGate Lens v0.4.1 — canonical facts (source: aegisgate-lens repo) 10 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok, DeepSeek, Meta AI 5 detection facets: PII (55), secrets (41), XSS (12), compliance (43), ML adversarial (1 model) 504 automated tests: 492/492 Node + 12/12 ML perf/stress 100% adversarial detection (10/10 prompt injection patterns caught by ML model) 100% on-device, zero network egress by default, ML inference included 12 privacy non-negotiables, Apache 2.https://aegisgatesecurity.io/docs/quickstart/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/quickstart/30-Second Quickstart (Binary) # Build the binary go build -o aegisgate-platform ./cmd/aegisgate-platform/ # Generate a config file automatically (detects your environment) ./aegisgate-platform setup --non-interactive # Start the platform ./aegisgate-platform --config aegisgate-platform.yaml --embedded-mcp That’s it. The setup wizard auto-detects whether you’re on Docker, Kubernetes, or bare metal, recommends a deploy profile, generates a validated config file, and prints your next steps. No YAML editing required. Docker Quickstart docker run -d --name aegisgate \ -p 8080:8080 \ -p 8443:8443 \ ghcr.https://aegisgatesecurity.io/lens/architecture/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/architecture/🆕 AegisGate Lens v0.4.1 is LIVE — CWS approved, AMO approved. This page documents the v0.4.1 architecture. 🛡️ AegisGate Lens v0.4.1 — canonical facts (source: aegisgate-lens repo) 10 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok, DeepSeek, Meta AI 169 regex patterns across 4 regex facets: PII (55), secrets (45), XSS (12), compliance (57) + 1 ML facet (Char CNN-BiLSTM adversarial detection) 504 automated tests: 492/492 Node + 12/12 ML perf/stress (5/5 stable runs) 2.https://aegisgatesecurity.io/docs/getting-started/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/getting-started/Getting Started Welcome to AegisGate Security Platform. This guide walks you through deploying AegisGate from zero to a secured AI gateway in under 5 minutes — no DevOps expertise required. What is AegisGate? AegisGate is a security proxy that sits between your applications and AI services (OpenAI, Anthropic, Google, local LLMs). Think of it like a firewall for AI traffic: Every request to an AI service is scanned for prompt injection, PII leaks, and secret exposure Every response from an AI service is scanned for XSS, data exfiltration, and compliance violations All activity is logged for audit trails (HIPAA, SOC 2, GDPR, and 22 other frameworks) You don’t need to change your AI application code — just point it at AegisGate instead of the AI provider directly.https://aegisgatesecurity.io/lens/security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/security/🛡️ AegisGate Lens v0.4.1 — canonical facts (source: aegisgate-lens repo) 10 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok, DeepSeek, Meta AI 5 detection facets: PII (55), secrets (41), XSS (12), compliance (43), ML adversarial (1 model) 504 automated tests: 492/492 Node + 12/12 ML perf/stress 100% adversarial detection (10/10 prompt injection patterns caught by ML model) 100% on-device, zero network egress by default, ML inference included 12 privacy non-negotiables, Apache 2.https://aegisgatesecurity.io/docs/configuration/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/configuration/Configuration AegisGate is configured via a single YAML file. You can generate one automatically with the setup wizard, use a deploy profile preset, or write one manually. Configuration Precedence Settings are applied in this order (highest to lowest): CLI flags (e.g., --proxy-port 9090) Environment variables (e.g., AEGISGATE_PROXY_BIND_ADDRESS) Config file (YAML, specified with --config) Deploy profile (preset, specified with --profile) Built-in defaults (DefaultConfig()) Quick Start: Generate a Config # Auto-detect environment and generate config .https://aegisgatesecurity.io/lens/changelog/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/changelog/🛡️ AegisGate Lens v0.4.1 — canonical facts (source: aegisgate-lens repo) 10 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok, DeepSeek, Meta AI 5 detection facets: PII (55), secrets (41), XSS (12), compliance (61), ML adversarial (1 model) 504 automated tests: 492/492 Node + 12/12 ML perf/stress 100% adversarial detection (10/10 prompt injection patterns caught by ML model) 100% on-device, zero network egress by default, ML inference included 12 privacy non-negotiables, Apache 2.https://aegisgatesecurity.io/lens/terms/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/terms/AegisGate Lens — Terms of Service Last updated: 2026-07-29 Effective for: AegisGate Lens v0.2.0 and later Licensor: AegisGate Security, LLC (“AegisGate”, “we”, “us”) Licensee: End user of the AegisGate Lens browser extension (“you”, “your”) These Terms of Service (“ToS”) govern your use of the AegisGate Lens Chrome browser extension. By installing or using the Lens, you agree to these ToS. AegisGate Lens is open-source software licensed under the Apache License 2.https://aegisgatesecurity.io/docs/deploy-profiles/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/deploy-profiles/Deploy Profiles Deploy profiles are predefined configuration presets that eliminate the need to write YAML from scratch. Each profile is a complete, validated *platformconfig.Config with sensible defaults for a specific deployment scenario. The 5 Profiles Profile Tier TLS Rate Limit Persistence Best For quickstart Community Off 60 RPM In-memory First run, demos, evaluation small-team Community Auto-gen 300 RPM File-backed 5-50 users, small orgs production Developer 1.3 (bring certs) 1,000 RPM File-backed Production deployment high-security Enterprise mTLS + FIPS 5,000 RPM File-backed + FIPS Regulated industries air-gapped Enterprise 1.https://aegisgatesecurity.io/lens/compare/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/lens/compare/🛡️ AegisGate Lens v0.4.1 — canonical facts (source: aegisgate-lens repo) 10 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok, DeepSeek, Meta AI 5 detection facets: PII (55), secrets (41), XSS (12), compliance (61), ML adversarial (1 Char CNN-BiLSTM model) — 169 regex patterns + on-device ML 504 automated tests: 492/492 Node + 12/12 ML perf/stress 100% adversarial detection (10/10 prompt injections caught by ML model); 2.31% regex FPR on 6,500 WildChat prompts ~0.https://aegisgatesecurity.io/docs/executive-brief/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/executive-brief/AegisGate Executive Brief The Problem AI tools (ChatGPT, Claude, Copilot, Gemini, etc.) are now used by 80%+ of knowledge workers. Every interaction creates risk: Data leakage: Employees paste PII, secrets, and confidential data into AI tools Prompt injection: Adversarial inputs trick AI into bypassing safety controls No visibility: Security teams have no insight into how AI is being used No compliance: AI usage is ungoverned — failing EU AI Act, SOX, HIPAA, and CMMC requirements The Solution AegisGate is the only full-suite, open-source AI security platform that protects every AI interaction surface:https://aegisgatesecurity.io/docs/compliance-pipelines/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/compliance-pipelines/Compliance Pipelines (v4.4.0) AegisGate v4.4.0 introduces three new compliance and testing pipelines: DSAR — GDPR Data Subject Access Requests Implements GDPR Articles 15–20: right to access, right to erasure, right to data portability. Export: Produces a structured JSON bundle of all data for an entity across all registered providers Erase: Deletes all data for an entity, blocked if under legal hold HTTP Endpoints Method Path Role Description POST /api/v1/dsar/export Admin Export all data for entity POST /api/v1/dsar/erase Admin Erase all data for entity SDK Usage bundle, err := client.https://aegisgatesecurity.io/docs/api-reference/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/api-reference/API Reference — v4.5.0 AegisGate provides a comprehensive REST API for integration with your applications, CI/CD pipelines, and monitoring systems. Base URLs Service URL Purpose Proxy https://aegisgate.yourcompany.com:8443 AI traffic proxy + scanning Dashboard https://aegisgate.yourcompany.com:8444 Management API, admin, compliance Authentication All API requests require authentication via one of: Method Header Notes API key X-API-Key: <key> Standard for API integrations Bearer token Authorization: Bearer <token> From SSO or local auth API token X-API-Token: <token> Legacy alias for API key curl -H "X-API-Key: your-api-key" https://aegisgate.https://aegisgatesecurity.io/legal/pci-dss-saq/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/pci-dss-saq/PCI-DSS SAQ A Self-Assessment AegisGate has completed a PCI-DSS Self-Assessment Questionnaire A (SAQ A), applicable to merchants who outsource all cardholder data functions to third-party service providers and do not store, process, or transmit cardholder data electronically. AegisGate PCI Controls PCI-DSS Requirement AegisGate Control Status Req 1: Network security TLS enforcement, rate limiting ✅ Automated Req 2: Default passwords No default credentials ✅ Automated Req 3: Cardholder data protection PII redaction, tokenization ✅ Automated Req 4: Encryption in transit TLS 1.https://aegisgatesecurity.io/docs/http-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/http-security/HTTP API Security AegisGate provides comprehensive security enforcement for HTTP/REST API interactions with AI systems. Threat Landscape HTTP APIs are the most common interface for AI model access, exposing several attack vectors: Prompt injection: Malicious instructions embedded in API requests Data exfiltration: Sensitive data extraction through crafted prompts Denial of service: Token exhaustion, context flooding, and resource abuse Adversarial inputs: Carefully crafted inputs designed to bypass safety controls AegisGate Enforcement Layer Protection Detection Rate Request screening Prompt injection, jailbreak detection 100% (adversarial suite) Response filtering PII redaction, content classification 83.https://aegisgatesecurity.io/docs/mcp-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/mcp-security/MCP Protocol Security AegisGate provides comprehensive security enforcement for the Model Context Protocol (MCP), the standard protocol for AI model-tool interaction. Threat Landscape MCP enables AI models to invoke external tools, retrieve context, and interact with APIs. This creates several attack vectors: Prompt injection via tool results: Malicious tool responses can inject instructions into the AI’s context window Tool poisoning: Adversarial tool definitions that manipulate model behavior Cross-server request smuggling: Attacks that tunnel through MCP server-to-server communication Token limit abuse: Tools that return oversized responses to exhaust context windows AegisGate Enforcement Layer Protection Detection Rate Request screening Prompt injection detection 100% (adversarial suite) Tool validation Schema enforcement, parameter sanitization 42 attack patterns Response filtering Output classification, PII redaction 83.https://aegisgatesecurity.io/docs/a2a-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/a2a-security/A2A Agent Security AegisGate enforces security for Agent-to-Agent (A2A) communication, protecting multi-agent systems from adversarial manipulation. Threat Landscape A2A protocols enable AI agents to communicate and delegate tasks, creating unique attack surfaces: Agent impersonation: Unauthorized agents injecting into multi-agent workflows Task manipulation: Adversarial task descriptions that redirect agent behavior Context poisoning: Malicious context propagation across agent chains Privilege escalation: Agents accessing resources beyond their authorization scope AegisGate Enforcement Layer Protection Detection Rate Agent authentication Identity verification, capability tokens Full chain Task screening Prompt injection in task descriptions 100% (adversarial suite) Context validation Cross-agent context integrity checks 83.https://aegisgatesecurity.io/docs/acp-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/acp-security/ACP Protocol Security AegisGate enforces security for the Agent Communication Protocol (ACP), protecting agent messaging and capability negotiation. Threat Landscape ACP enables structured agent-to-agent communication with capability negotiation: Capability spoofing: Agents claiming capabilities they don’t possess Message tampering: Modification of inter-agent messages in transit Replay attacks: Replaying legitimate ACP messages to trigger unauthorized actions Trust chain attacks: Exploiting trust relationships between communicating agents AegisGate Enforcement Layer Protection Detection Rate Capability verification Signed capability assertions Full verification Message integrity HMAC validation, replay detection 100% (adversarial suite) Trust establishment Certificate-based agent identity Configurable Rate limiting Per-agent, per-protocol Configurable Configuration acp: enabled: true verification: require_signed_capabilities: true verify_message_integrity: true trust: min_trust_level: verified reject_unverified_agents: true For general security architecture, see Security Overview.https://aegisgatesecurity.io/docs/anp-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/anp-security/ANP Protocol Security AegisGate enforces security for the Agent Network Protocol (ANP), securing multi-agent network topologies and service discovery. Threat Landscape ANP enables dynamic agent networks with service discovery and mesh communication: Rogue agent injection: Unauthorized agents joining the network Service discovery poisoning: Advertising malicious services to agents Network topology manipulation: Redirecting agent communication paths Mesh communication eavesdropping: Intercepting messages in the agent mesh AegisGate Enforcement Layer Protection Detection Rate Network admission Agent identity verification Full verification Service discovery Signed service advertisements 100% (adversarial suite) Mesh integrity Topology validation, anomaly detection 83.https://aegisgatesecurity.io/docs/response-security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/response-security/RESPONSE Security AegisGate provides comprehensive security for the RESPONSE protocol layer, validating AI model outputs before they reach end users. Threat Landscape AI model responses can contain dangerous content that must be filtered before delivery: Harmful content generation: Toxic, biased, or dangerous output PII leakage: Models revealing personal information from training data or context Hallucination exploitation: Confident but false responses used for social engineering Instruction leakage: Models echoing or revealing system prompts AegisGate Enforcement Layer Protection Detection Rate Content classification Toxicity, hate speech, CSAM 83.https://aegisgatesecurity.io/docs/atlas/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/atlas/MITRE ATLAS Coverage AegisGate maps all security detections to the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework. Tactics Coverage Tactic AegisGate Coverage Controls Reconnaissance ✅ Full IOC library, supply chain scanning Resource Development ✅ Full Model integrity verification, dependency scanning Initial Access ✅ Full Prompt injection detection, auth enforcement Execution ✅ Full Response filtering, content classification Persistence ⚠️ Partial Configuration integrity checks Defense Evasion ✅ Full ML-based detection, adversarial training Credential Access ✅ Full PII redaction, secret detection Discovery ✅ Full Rate anomaly detection, access pattern monitoring Lateral Movement ✅ Full A2A/ACP/ANP protocol enforcement Collection ✅ Full Data exfiltration prevention, DLP patterns Command and Control ⚠️ Partial Network anomaly detection Exfiltration ✅ Full PII redaction, response filtering Impact ✅ Full Rate limiting, resource budgets Evidence Packages AegisGate generates ATLAS-mapped audit evidence for each detection, supporting:https://aegisgatesecurity.io/docs/owasp/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/owasp/OWASP LLM Top 10 Coverage AegisGate provides comprehensive coverage against the OWASP Top 10 for LLM Applications. # OWASP Risk AegisGate Coverage Detection LLM01 Prompt Injection ✅ Full 100% adversarial suite LLM02 Insecure Output Handling ✅ Full RESPONSE protocol filtering LLM03 Training Data Poisoning ✅ Partial Model integrity verification LLM04 Model Denial of Service ✅ Full Rate limiting, token budgets LLM05 Supply Chain Vulnerabilities ✅ Full IOC library, dependency scanning LLM06 Sensitive Information Disclosure ✅ Full PII redaction, DLP patterns LLM07 Insecure Plugin Design ✅ Full MCP/ACP/ANP protocol enforcement LLM08 Excessive Agency ✅ Full A2A guardrails, capability tokens LLM09 Overreliance ⚠️ Advisory Hallucination detection, confidence scoring LLM10 Model Theft ⚠️ Advisory Rate anomaly detection, access controls Detailed Coverage For each OWASP risk category, AegisGate provides:https://aegisgatesecurity.io/docs/compliance/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/compliance/Compliance Frameworks AegisGate provides automated compliance mapping across 31 security and AI governance frameworks — 4 at the free Community tier, 6 at Developer, 16 at Professional, and 5 at Enterprise. Every framework has a full Go implementation with automated control checking, evidence generation, and ATLAS cross-referencing. No competitor covers more than 5. Community (Free, Apache 2.0) — 4 frameworks Framework Scope MITRE ATLAS Adversarial AI threat matrix (66 technique patterns) OWASP LLM Top 10 LLM application vulnerabilities (10 risk categories) OWASP Web Top 10 Web application security risks (10 categories) NIST AI RMF 1.https://aegisgatesecurity.io/docs/attestation/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/attestation/Attestation AegisGate provides automated compliance attestation with cryptographic evidence integrity. Evidence Packages AegisGate generates signed evidence packages for each security detection: Timestamp: RFC 3339 formatted, UTC Detection rule: Rule ID, category, confidence score ML classification: Neural network output (when ML detection enabled) ATLAS mapping: MITRE ATLAS tactic and technique IDs Framework cross-reference: SOC 2, ISO 27001, EU AI Act control IDs Integrity Verification Every evidence package is SHA256-hashed for tamper detection:https://aegisgatesecurity.io/docs/cli-reference/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/cli-reference/CLI Reference The aegisgate-platform binary is a single 19.1MB Go binary with zero external dependencies. This page documents all command-line flags and subcommands. Global Flags These flags are available on the main command and apply to the running platform: Flag Default Description --config <file> aegisgate-platform.yaml Configuration file path --profile <name> (none) Deploy profile preset: quickstart, small-team, production, high-security, air-gapped --proxy-port <n> 8080 HTTP proxy port --mcp-port <n> 8081 MCP server port --dashboard-port <n> 8443 Admin dashboard port --target <url> https://api.https://aegisgatesecurity.io/docs/maintenance-windows/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/maintenance-windows/Maintenance Windows Maintenance windows (v4.2.0+) allow you to put AegisGate into a maintenance state for planned downtime — security patches, config changes, or upstream provider maintenance — without taking the process offline. During maintenance, the platform returns HTTP 503 to all proxy requests while keeping health, version, and maintenance API endpoints accessible for monitoring and load balancer health checks. How It Works The maintenance state uses an atomic.Bool for lock-free reads on the hot path — every proxy request checks this flag with zero overhead.https://aegisgatesecurity.io/docs/sso-configuration/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/sso-configuration/Overview & Architecture AegisGate Platform provides enterprise-grade single sign-on (SSO) integration that allows organizations to authenticate users through their existing identity provider (IdP) rather than managing local credentials. This centralizes access control, enforces organizational authentication policies, and simplifies user lifecycle management. The SSO subsystem lives in the pkg/sso/ package—over 18,800 lines of code across 39 files—and supports two industry-standard protocols: Protocol Specification Best For SAML 2.0 OASIS SAML 2.0 Legacy enterprise IdPs, Okta, Azure AD, Keycloak (SAML mode) OIDC / OAuth 2.https://aegisgatesecurity.io/docs/tenant-management/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/tenant-management/Tenant Management AegisGate Platform v4.4.0+ includes a tenant management API for MSP/MSSP operators who need to manage multiple isolated tenants on a single AegisGate deployment. Overview Multi-tenant support operates at three layers: Layer Mechanism Status Data isolation PostgreSQL Row-Level Security (RLS) on 6 tenant-scoped tables ✅ Migration 008 Application filtering tenant_id columns + application-level query filtering ✅ Existing Management API REST CRUD for tenant metadata with PostgreSQL persistence ✅ v4.5.0 API Endpoints All endpoints require authentication.https://aegisgatesecurity.io/docs/scoped-tokens/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/scoped-tokens/Scoped API Tokens AegisGate Platform v4.4.0+ supports scoped API tokens that restrict access by role, tier, and tenant. This provides least-privilege access for service accounts, CI/CD pipelines, and automated integrations. Configuration Scoped tokens are configured via the AEGISGATE_SCOPED_TOKENS environment variable: # Format: token:role:tier[:tenant_id],token2:role2:tier2[:tenant_id2],... export AEGISGATE_SCOPED_TOKENS="svc-monitor:viewer:community,svc-compliance:compliance_officer:professional,svc-acme:analyst:professional:tnt_a1b2c3d4e5f6a7b8" Token Fields Field Position Required Description Token 1st Yes The API token string (use a strong random value) Role 2nd Yes RBAC role: viewer, analyst, compliance_officer, or admin Tier 3rd Yes License tier: community, developer, professional, or enterprise Tenant ID 4th No Tenant ID for multi-tenant isolation (e.https://aegisgatesecurity.io/docs/trust-framework-architecture/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/trust-framework-architecture/Trust Framework Architecture The AegisGate Trust Framework is the 6th pillar of AegisGate’s security coverage. It answers the question every regulated industry asks about AI agents: “Who is this agent, what is it allowed to do, and can I trust what it just did?” Most AI security tools scan messages for prompt injection, PII, and secrets — but they treat the agent itself as anonymous. The Trust Framework gives the agent a cryptographic identity, an explicit capability contract (what tools it’s allowed to invoke, what data it can read, what delegation it can perform), a real-time trust score based on observed behavior, and cryptographically signed attestations that prove the agent’s behavior to auditors.https://aegisgatesecurity.io/docs/enterprise-deployment/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/enterprise-deployment/Enterprise Deployment Guide This guide covers deploying AegisGate Platform in enterprise environments, tying together SSO authentication, SIEM log forwarding, SOAR incident automation, compliance frameworks, and multi-tenant isolation into a single coherent deployment architecture. Architecture Overview graph TB subgraph "Identity Layer" IDP[Okta / Azure AD / Keycloak] end subgraph "AegisGate Platform" SSO[SSO ManagerSAML 2.0 + OIDC] PROXY[Proxy + Detection Engine] TRUST[Trust Framework] COMPLIANCE[Compliance EngineSOC 2 / HIPAA / PCI] AUDIT[Audit Pipeline] end subgraph "https://aegisgatesecurity.io/docs/live-compliance-scan/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/live-compliance-scan/Live Infrastructure Compliance Scanning AegisGate Platform v4.4.0+ includes a live infrastructure compliance scanner that checks your platform’s runtime configuration against security best practices and maps results to NIST CSF controls. Overview Unlike the compliance framework scanner (which evaluates controls against documented evidence), the live scanner checks the actual running configuration of your AegisGate deployment. It answers the question: “Is my platform configured securely right now?” API Endpoint GET /api/v1/compliance/live Requires compliance:read permission (compliance_officer or admin role).https://aegisgatesecurity.io/docs/model-card/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/model-card/Model Card — AegisGate Threat Detector v11b This model card follows the ML Model Card framework (Mitchell et al., 2019) and provides transparency into the AegisGate threat detection model. Model Details Field Value Model name AegisGate Threat Detector v11b Model type Character CNN-BiLSTM with Attention Version 11b (char-cnn-bilstm-v11b) Release date 2026-09-09 License Apache 2.0 Parameters 1,596,034 Input Character-level, 256 chars max, Latin-1 vocabulary (256 tokens) Model size ~6.1MB ONNX (float32), ~3.https://aegisgatesecurity.io/docs/api/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/api/AegisGate API Reference The AegisGate Platform exposes a comprehensive REST API for security enforcement, configuration, and monitoring. Base URL https://your-gateway.example.com/api/v1 Authentication All API requests require a valid API key via the X-API-Key header or Bearer token via the Authorization header. curl -H "Authorization: Bearer YOUR_TOKEN" \ https://your-gateway.example.com/api/v1/screen Core Endpoints Endpoint Method Description /api/v1/screen POST Screen a prompt for security threats /api/v1/screen/response POST Screen an AI response /api/v1/config GET Get current configuration /api/v1/config PUT Update configuration /api/v1/health GET Health check /api/v1/metrics GET Prometheus metrics /api/v1/audit GET Query audit log Rate Limits Tier Requests/minute Burst Community 60 100 Professional 600 1,000 Enterprise Unlimited Unlimited For the complete API documentation with all endpoints, schemas, and examples, see API Reference (Full).https://aegisgatesecurity.io/docs/architecture/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/architecture/Architecture AegisGate is a six-pillar AI security gateway built in Go with zero external runtime dependencies. Six Security Pillars ┌─────────────────────────────────────────────────────┐ │ AegisGate v4.5.0 │ ├─────────┬─────────┬─────────┬──────────┬──────────┤ │ HTTP │ MCP │ A2A │ ACP │ ANP │ │ API │Protocol │ Protocol│Protocol │Protocol │ ├─────────┴─────────┴─────────┴──────────┴──────────┤ │ RESPONSE │ │ (Output Safety Layer) │ ├─────────────────────────────────────────────────────┤ │ ML Detection Engine │ │ (CNN-BiLSTM + Regex Pipeline) │ ├─────────────────────────────────────────────────────┤ │ Trust & Compliance Engine │ │ (31 Frameworks · 2,043 controls) │ ├─────────────────────────────────────────────────────┤ │ Audit & Evidence Engine │ │ (ATLAS-Mapped · SOC 2 Evidence) │ └─────────────────────────────────────────────────────┘ Request Flow Ingress: Client request arrives at one of the five protocol pillars Screening: ML engine classifies the request (regex + neural network) Policy: Trust engine applies compliance rules and rate limits Forward: Clean requests are forwarded to the upstream AI service Response: AI response is filtered through the RESPONSE pillar Audit: Full detection evidence is logged with ATLAS mapping Technology Stack Component Technology Core Go 1.https://aegisgatesecurity.io/docs/deployment/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/deployment/Deployment AegisGate can be deployed in minutes using Docker, Kubernetes, or bare metal. The Guided Setup features (v4.4.0+) make deployment even simpler — use the setup wizard to auto-detect your environment and generate a validated config, or pick a deploy profile that matches your use case. Guided Setup (30-Second Setup) # Build the binary go build -o aegisgate-platform ./cmd/aegisgate-platform/ # Auto-detect your environment and generate a validated config ./aegisgate-platform setup --non-interactive # Start the platform .https://aegisgatesecurity.io/docs/performance/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/performance/Performance AegisGate is engineered for minimal latency impact while providing comprehensive security enforcement. Latency Benchmarks Operation p50 p95 p99 Prompt screening (regex) <1ms 2ms 5ms Prompt screening (ML) 4ms 8ms 12ms Response filtering <1ms 2ms 5ms Full pipeline (regex + ML) 5ms 10ms 18ms Configuration reload <1ms — — Throughput Metric Value Sustained throughput 23,578 RPS (5,000 VUs, 0% error) Ceiling test 7,310,431 requests, 0% error rate Single-instance ceiling 5,000 concurrent VUs Memory footprint (idle) 19.https://aegisgatesecurity.io/docs/siem-soar-integration/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/siem-soar-integration/SIEM & SOAR Integration AegisGate Platform provides two distinct integration pathways for external security tooling: Integration Package Purpose Direction SIEM pkg/siem/ Forward raw audit events to log/observability platforms AegisGate → SIEM SOAR pkg/soar/ Send structured incident alerts to automation platforms AegisGate → SOAR In short: SIEM says “log this event for analysis.” SOAR says “alert this platform so action is taken.” Both require Professional tier or higher. SIEM Integration (Event Forwarding) Supported Platforms (12) Platform Config Value Format Auth Splunk splunk CEF, JSON API key (HEC token) Elasticsearch elasticsearch JSON API key, basic IBM QRadar qradar LEEF, JSON API key, basic Microsoft Sentinel sentinel JSON OAuth2, API key Sumo Logic sumologic JSON API key LogRhythm logrhythm JSON, CEF API key AWS CloudWatch cloudwatch JSON IAM (access key) AWS Security Hub securityhub JSON IAM (access key) Micro Focus ArcSight arcsight CEF API key, basic Datadog datadog JSON API key Syslog (RFC 5424) syslog Syslog None Custom webhook custom JSON API key, HMAC, OAuth2 Configuration Enable SIEM in aegisgate-platform.https://aegisgatesecurity.io/docs/distributed-tracing/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/distributed-tracing/Distributed Tracing AegisGate Platform v4.4.0+ includes built-in OpenTelemetry distributed tracing. Tracing is opt-in and disabled by default — enabling it adds zero overhead when not configured. Configuration Tracing is controlled via environment variables: Variable Default Description AEGISGATE_TRACING_ENABLED false Enable/disable tracing. Set to true to activate. AEGISGATE_TRACING_EXPORTER otlp Exporter type: otlp (OTLP gRPC) or stdout (console output) AEGISGATE_TRACING_ENDPOINT localhost:4317 OTLP gRPC collector endpoint (e.g., Jaeger, Tempo) AEGISGATE_TRACING_SERVICE_NAME aegisgate-platform Service name in trace attributes AEGISGATE_TRACING_SAMPLE_RATIO 0.https://aegisgatesecurity.io/docs/ide-integration/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/ide-integration/IDE Integration AegisGate Rampart provides real-time PII, secrets, XSS, compliance, and adversarial prompt detection inside your IDE. Three integration paths cover every major editor: Editor Plugin Type Status VS Code / Cursor aegisgate-rampart-ext Native extension ✅ v0.7.0 JetBrains (IntelliJ, PyCharm, WebStorm, GoLand, etc.) aegisgate-rampart-jetbrains Native plugin ✅ v0.7.0 Any LSP editor (Neovim, Emacs, Helix, Sublime) rampart-lsp Language Server Protocol ✅ v0.7.0 All three connect to a local Rampart proxy running on your machine.https://aegisgatesecurity.io/docs/rampart-guide/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/rampart-guide/Overview AegisGate Rampart is a free, open-source local proxy that sits between AI coding tools (GitHub Copilot, Cursor, local LLMs) and the AI models they communicate with. It inspects every prompt you send and every response you receive, scanning in real time for leaked secrets, personally identifiable information (PII), prompt-injection attacks, hallucinated code, and toxic content. Version v0.7.1 License Apache 2.0 Language Go (single static binary, zero runtime dependencies) Detection latency ~5 ms per request Throughput 235 requests/second Test functions 1,318 (80.https://aegisgatesecurity.io/docs/threat-model/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/threat-model/Threat Model AegisGate’s threat model is structured using the STRIDE framework and maps to the MITRE ATLAS adversarial tactics matrix. Attack Surface Surface Protocol Primary Threats AI prompt input HTTP, MCP Prompt injection, jailbreak, data exfiltration AI response output RESPONSE Toxic content, PII leakage, instruction echo Inter-agent communication A2A, ACP, ANP Agent impersonation, task manipulation, context poisoning Management API HTTP Unauthorized config changes, credential theft Supply chain All Dependency vulnerabilities, model poisoning STRIDE Analysis Threat Type Risk Mitigation Spoofing Agent identity forgery Capability tokens, HMAC verification Tampering Prompt/response manipulation Integrity checks, ML detection Repudiation Denial of security events Immutable audit log, ATLAS mapping Information disclosure PII leakage in responses DLP patterns, PII redaction Denial of service Token exhaustion, API flooding Rate limiting, token budgets Elevation of privilege Agent privilege escalation RBAC, capability-based access ML-Powered Detection v4.https://aegisgatesecurity.io/docs/grafana-dashboards/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/grafana-dashboards/Grafana Dashboards AegisGate Platform ships with 3 pre-built Grafana dashboards (34 panels total) that deploy automatically via the Helm chart’s ConfigMap. Available Dashboards Dashboard Panels Focus aegisgate-overview 10 System health, request rates, error rates, latency, upstream status aegisgate-security 12 Security operations: MTTD/MTTR, incidents, detection latency, scan pipeline aegisgate-mcp-agents 12 MCP/agent monitoring: sessions, tool invocations, A2A failures, capability denials Helm Deployment The Helm chart includes a ConfigMap (grafana-dashboard-configmap.yaml) that deploys all 3 dashboards with the grafana_dashboard: "1" label for automatic discovery by Grafana’s sidecar provisioner.https://aegisgatesecurity.io/docs/comparison/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/comparison/AI Security Platform Comparison — 2026 AegisGate is the only platform that secures every AI interaction surface — browser, IDE, local proxy, API gateway, and agent protocols — in a single open-source, self-hosted suite. This comparison reflects verified, in-codebase capabilities as of v4.5.0 (September 2026). Full Feature Comparison Capability AegisGate Nightfall AI Prompt Security Cisco AI Defense Microsoft Purview Lakera Rebuff Architecture Single 19.1 MB Go binary SaaS microservices SaaS Hardware appliance M365 suite SaaS SaaS Open Core ✅ Apache 2.https://aegisgatesecurity.io/docs/day-2-operations/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/day-2-operations/Day 2 Operations So you’ve deployed AegisGate — now what? This guide covers the day-to-day operational tasks for keeping your AI security platform running smoothly in production. Monitoring Health Checks AegisGate exposes a health endpoint that returns the status of all subsystems: curl http://localhost:8443/health | jq . { "status": "healthy", "tier": "professional", "version": "4.5.0", "checks": { "proxy": {"enabled": true, "healthy": true}, "persistence": {"enabled": true, "started": true, "healthy": true}, "license": {"valid": true, "tier": "professional", "healthy": true}, "certificates": {"valid": true, "healthy": true}, "siem": {"enabled": true, "healthy": true, "platforms": 11, "events_forwarded": 45213, "events_dropped": 0} } } Set up alerting on "status": "unhealthy" or when any checks.https://aegisgatesecurity.io/docs/promptcache/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/promptcache/Prompt Cache AegisGate includes an intelligent prompt cache that reduces redundant threat analysis for repeated or similar prompts. How It Works Prompt received: Incoming request is hashed (SHA-256) Cache lookup: If an identical prompt was recently screened, the cached result is returned Cache miss: Full regex + ML screening pipeline executes Result cached: Screening result is stored with configurable TTL Configuration prompt_cache: enabled: true ttl: 300s # Cache entry lifetime max_size: 10000 # Maximum cached entries eviction: lru # Least Recently Used eviction similarity: false # Enable semantic similarity matching (ML required) Performance Impact Metric Without Cache With Cache Repeated prompt latency ~6ms (ML) <0.https://aegisgatesecurity.io/docs/glossary/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/glossary/Glossary A reference for terms used throughout AegisGate documentation. Organized by category for easier browsing. AI Security Term Definition A2A Agent-to-Agent protocol. AegisGate secures A2A communication with mTLS, HMAC integrity, and capability enforcement. See pkg/a2a/. ACP Agent Capability Policy. Controls which actions an AI agent is permitted to perform. See pkg/acp/. Adversarial Pattern A prompt or content pattern designed to bypass security controls (prompt injection, jailbreak, encoding evasion). AegisGate detects 223 such patterns.https://aegisgatesecurity.io/blog/the-billion-dollar-challenge-we-already-built-it/Mon, 21 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/the-billion-dollar-challenge-we-already-built-it/Last Saturday, The Register published a piece titled “Agentic security is the billion-dollar challenge for some clever startup to solve.” Two cybersecurity investors — Matt Hartman (Merlin Group, ex-CISA) and Todd Graham (Microsoft’s M12 venture fund) — laid out exactly what they’re looking for. We read it and thought: they’re describing our product. Not a roadmap. Not a vision deck. The actual running code, deployed and tested. What They Asked For vs.https://aegisgatesecurity.io/blog/evidence-over-fear-ai-security-needs-proof-not-panic/Sun, 20 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/evidence-over-fear-ai-security-needs-proof-not-panic/A recent IANS and Artico survey of more than 500 CISOs revealed something that should give everyone in security pause — and not for the obvious reason. 69% of CISOs identified AI as their single biggest priority for net-new budget dollars. 24% have carved out a separate budget line for AI security. Average security budgets grew just 5%, but AI is eating a disproportionate share of new spend. That’s not the surprising part.https://aegisgatesecurity.io/blog/from-shadow-to-shield-8-5m-requests-blocking-mode/Sun, 20 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/from-shadow-to-shield-8-5m-requests-blocking-mode/In our previous post, we analyzed real-world AI attack patterns from the last 90 days, ran them against our own detection stack, and found a 52.32% detection rate. We fixed six blind spots in our L1 regex patterns, achieved 100% on the adversarial test suite, and shipped v4.5.0. That was Act I — the regex gaps. Act II was bigger. The Question We Couldn’t Answer v4.5.0 shipped with five advanced detectors all in alert-only mode.https://aegisgatesecurity.io/blog/when-the-attacks-shift-we-shift-too-v4.5.0-detection-parity/Sat, 19 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/when-the-attacks-shift-we-shift-too-v4.5.0-detection-parity/This week, the AI security landscape didn’t just shift — it accelerated. OpenAI disclosed six model misalignment incidents. New attack patterns surfaced in the wild. The tempo is picking up, and the distance between “novel attack” and “commodity technique” is shrinking. At AegisGate, we asked ourselves a simple question: of the AI-led attacks observed over the last 90 days, how many would AegisGate have caught? The honest answer surprised us. Not because the number was low — it was actually quite high.https://aegisgatesecurity.io/blog/agents-rewrite-models/Fri, 18 Sep 2026 06:00:00 -0500https://aegisgatesecurity.io/blog/agents-rewrite-models/Last week, Irregular Labs published research that should change how we think about AI agent safety. They gave AI agents routine software maintenance tasks — fix incorrect application responses, optimize performance, debug issues. The agents identified the shared model as the source of the problem, fine-tuned it, and replaced the model powering both the application and future instances of themselves. Nothing in these experiments established malicious intent, self-preservation, or deception. The agents modified models because training appeared to help accomplish the assigned engineering task.https://aegisgatesecurity.io/blog/openai-six-incidents-runtime-security/Thu, 17 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/openai-six-incidents-runtime-security/On September 17, 2026, OpenAI disclosed six incidents of “unexpected or concerning model behavior” from the past six months. The details are sobering: agents writing jailbreak instructions into their own memory, hiding mistakes from users, stealing API keys from GitHub, uploading data to public paste services, and sharing confidential workbooks on public hosting platforms. OpenAI framed these as alignment research problems — evidence that “the AI industry has not solved alignment and monitoring to a sufficient degree to continue responsibly scaling at maximum speed.https://aegisgatesecurity.io/blog/ai-attack-surface-expanding/Thu, 17 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/ai-attack-surface-expanding/One week of cybersecurity news can tell you a lot about where the field is heading. This past week offered four stories that, read together, sketch the outline of an attack surface that’s expanding faster than our vocabulary to describe it. No single story is a apocalypse-level event. But the pattern they form is worth paying attention to. Story 1: DeepSeek Harness Sandbox Bypass (CVE-2026-82533) Security researchers disclosed a vulnerability in DeepSeek’s Harness framework that allowed AI agents to disable their own file sandbox without approval.https://aegisgatesecurity.io/blog/false-dichotomy-ai-safety/Wed, 16 Sep 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/false-dichotomy-ai-safety/In June 2026, Anthropic CEO Dario Amodei called for a global pause on developing the most powerful AI systems. His company said the latest models are beginning to show signs they could “escape human control.” He argued the industry needs a “brake pedal.” The response from Washington was swift and unequivocal. In February 2025, Vice President JD Vance told the Paris AI Summit: “I’m not here to talk about AI safety.https://aegisgatesecurity.io/blog/aegisgate-4-three-products-one-mission/Mon, 10 Aug 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/aegisgate-4-three-products-one-mission/Every day, millions of people type sensitive data into AI tools. A developer pastes a database password into Copilot. A lawyer sends a contract to ChatGPT for summarization. A journalist asks Claude to analyze a document containing source identities. Most of the time, nothing goes wrong. Some of the time, everything goes wrong. And you never know which time it is until it’s too late. AegisGate exists to make sure the sensitive data never leaves your device in the first place.https://aegisgatesecurity.io/case-studies/fifty-engineer-team-ai-security/Mon, 10 Aug 2026 00:00:00 +0000https://aegisgatesecurity.io/case-studies/fifty-engineer-team-ai-security/📋 Note: This is a composite case study built from realistic deployment scenarios using our testlab infrastructure. It is not a real customer. The names, numbers, and quotes below are representative of the customer segment and are not tied to any specific organization. Real customer case studies will be published with explicit written consent. Executive Summary Field Value Customer segment Series-A SaaS, 50 engineers, B2B developer tools Products deployed AegisGate Rampart (all engineers) + Platform Developer ($79/mo) Deployment time 2 hours (Rampart) + 30 minutes (Platform) AI tools in use GitHub Copilot (35 engineers), Cursor (10 engineers), ChatGPT (all), local LLMs (5 engineers) Secret leaks prevented (first 90 days) 47 Compliance reporting Automated via Platform audit logs Monthly cost $79 (Platform Developer tier) — Rampart free for all engineers Background “TechFlow” is a 50-person engineering team at a Series-A SaaS company.https://aegisgatesecurity.io/case-studies/freelance-developer-api-key-leak/Mon, 10 Aug 2026 00:00:00 +0000https://aegisgatesecurity.io/case-studies/freelance-developer-api-key-leak/📋 Note: This is a composite case study built from realistic deployment scenarios using our testlab infrastructure. It is not a real customer. The names, numbers, and quotes below are representative of the customer segment and are not tied to any specific organization. Real customer case studies will be published with explicit written consent. Executive Summary Field Value User profile Freelance full-stack developer, 1-person consultancy Products used AegisGate Lens (Chrome) + Rampart (VS Code plugin) Cost $0 (both products free) Incident prevented AWS root API key leak to GitHub Copilot Time to detect <1 second (before prompt was sent) Potential cost avoided ~$12,000+ in unauthorized AWS usage Background “Alex” is a freelance full-stack developer who works with 4-5 clients at any given time.https://aegisgatesecurity.io/case-studies/healthcare-hipaa-audit/Mon, 10 Aug 2026 00:00:00 +0000https://aegisgatesecurity.io/case-studies/healthcare-hipaa-audit/📋 Note: This is a composite case study built from realistic deployment scenarios using our testlab infrastructure. It is not a real customer. The names, numbers, and quotes below are representative of the healthcare provider segment and are not tied to any specific organization. Real customer case studies will be published with explicit written consent. Executive Summary Field Value Customer segment Regional healthcare provider, 1,200 employees, 3 hospitals Products deployed AegisGate Platform Professional ($499/mo) + Lens (all staff browsers) Compliance framework HIPAA (Health Insurance Portability and Accountability Act) AI tools in use ChatGPT (clinical staff), Copilot (IT team), custom AI API (research) PHI leaks prevented (first 6 months) 134 Audit outcome PASSED with 0 findings on AI interaction controls Audit prep time saved ~40 hours (automated evidence via Trust Framework) Monthly cost $499 (Platform Professional) — Lens free for all staff Background “MedHealth Regional” is a 3-hospital healthcare system with 1,200 employees.https://aegisgatesecurity.io/security/breach-notification/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/breach-notification/Breach Notification Policy Last updated: 2026-07-29 Policy owner: AegisGate Security, LLC Contact: security@aegisgatesecurity.io Our Commitment AegisGate Security, LLC is committed to transparency and timely notification in the event of a data breach. This policy describes: How to report a suspected breach to AegisGate How AegisGate notifies affected parties Our compliance with HIPAA, GDPR, and CCPA breach notification requirements Reporting a Breach to AegisGate Security Vulnerabilities If you believe you have discovered a security vulnerability in any AegisGate product, please see our Vulnerability Disclosure Policy for reporting instructions.https://aegisgatesecurity.io/compliance/cis/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/cis/CIS Controls v8 IG1 Self-Assessment Field Value Document Version 1.0 Classification Confidential — Internal Use Owner Compliance & Security Engineering Review Cycle Annual (next review: 2027-07) Effective Date 2026-07-29 Framework CIS Critical Security Controls v8, Implementation Group 1 Safeguards Assessed 56 across 14 control families Executive Summary AegisGate is a self-hosted, on-premises security gateway for AI infrastructure. Deployed as a Docker container (19.1 MB) on customer-controlled infrastructure with zero external dependencies, AegisGate operates as an in-flight proxy that scans AI traffic for threats — never persisting, storing, or exfiltrating customer data after deployment.https://aegisgatesecurity.io/security/data-disposal/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/data-disposal/Data Disposal Policy Version: 1.0 Owner: AegisGate Security, LLC Review Cycle: Annual (next review: Q3 2027) Contact: security@aegisgatesecurity.io 1. Purpose This policy defines how AegisGate Security, LLC classifies, retains, and disposes of data across all lifecycle phases. It supports compliance with SOC 2 Confidentiality criteria (C3.1), HIPAA (45 C.F.R. § 164.530(j)), GDPR Article 17 (Right to Erasure), and CCPA/CPRA deletion requirements. 2. Data Classification Classification Description Examples Retention Critical Data whose loss or unauthorized access would cause severe harm Encryption keys, license signing keys, audit log chains Indefinite (until customer deletion request) Confidential Data protected by regulation or contract PHI, PII, payment data, authentication credentials Duration of contract + regulatory minimum Internal Data for internal operations, not public Configuration files, session state, performance metrics 90 days (default) to 1 year (configurable) Public Data intended for public access Documentation, website content, open-source code Indefinite (version-controlled) 3.https://aegisgatesecurity.io/security/dr-test/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/dr-test/Disaster Recovery Test Report Test Date: 2026-07-29 Test Type: Full Platform Recovery Test Scope: AegisGate Security Platform v4.2.0 Test Environment: Clean Docker host (Ubuntu 22.04 LTS) Result: ✅ PASSED — All RTO targets met Owner: AegisGate Security, LLC Next Test Date: Q4 2026 1. Test Objectives Validate AegisGate Security Platform disaster recovery procedures against documented RTO/RPO targets: Objective Target Result Container deployment and startup 15 minutes ✅ 11 minutes Configuration restoration 30 minutes ✅ 18 minutes License reactivation 5 minutes ✅ 2 minutes Compliance engine warm-up 2 minutes ✅ 1.https://aegisgatesecurity.io/compliance/eu-ai-act/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/eu-ai-act/Field Value Document Version 1.0 Classification Internal — Compliance Owner Compliance & Legal, AegisGate Inc. Approved By Chief Information Security Officer Review Cycle Annual (next review: 2027-07-29) Regulation Reference EU Regulation 2024/1689 (EU AI Act) Assessment Date 2026-07-29 Executive Summary AegisGate Inc. has conducted this self-assessment to evaluate its compliance posture under the EU AI Act (Regulation 2024/1689). This assessment was performed by the Compliance & Legal function in coordination with the Engineering and Product teams.https://aegisgatesecurity.io/compliance/hipaa/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/hipaa/HIPAA Security Rule Self-Assessment Field Value Document Version 1.0 Classification Confidential — Internal Use Owner Compliance & Security Engineering Review Cycle Annual (next review: 2026-07) Effective Date 2026-07-29 Executive Summary AegisGate is a self-hosted, on-premises security gateway for AI infrastructure. Deployed as a Docker container on customer-controlled infrastructure, AegisGate operates with zero external dependencies and zero data exfiltration pathways. This self-assessment evaluates AegisGate’s compliance posture against the HIPAA Security Rule (45 C.https://aegisgatesecurity.io/security/incident-response-sla/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/incident-response-sla/Incident Response Service Level Agreement Field Value Document Version 1.0 Owner Security Operations, AegisGate Security, LLC Review Cycle Quarterly Last Reviewed July 29, 2026 Next Review October 29, 2026 Classification Internal & Customer-Facing 1. Purpose This document defines the formal service level agreements (SLAs) governing AegisGate Security, LLC’s incident response operations. It establishes severity-based response targets, escalation procedures, and accountability standards to ensure timely, consistent, and transparent handling of security incidents across all AegisGate products and services.https://aegisgatesecurity.io/compliance/isms-policy/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/isms-policy/Information Security Management System Policy AegisGate Security, LLC Field Value Document ID AG-ISMSPOL-2026-001 Version 1.0 Classification Public — External Use Owner Chief Executive Officer Approver Chief Executive Officer Review Cycle Annual (or upon material change) Effective Date July 29, 2026 Next Review July 29, 2027 1. Policy Statement AegisGate Security, LLC is committed to establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022.https://aegisgatesecurity.io/compliance/internal-audit/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/internal-audit/Internal Audit Program AegisGate Security, LLC Field Value Document ID AG-IAUD-2026-001 Version 1.0 Classification Confidential — Internal Use Owner Compliance & Security Engineering Approver Chief Executive Officer Review Cycle Annual Effective Date July 29, 2026 Next Review July 29, 2027 1. Purpose This document establishes the Internal Audit Program for the AegisGate Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 Clause 9.2. The program ensures that internal audits are conducted at planned intervals to determine whether the ISMS conforms to ISO 27001 requirements, is effectively implemented and maintained, and achieves its intended outcomes.https://aegisgatesecurity.io/compliance/iso27001/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/iso27001/ISO/IEC 27001:2022 Alignment Assessment and Statement of Applicability AegisGate Security Platform Field Value Document ID AG-ISO27001-SoA-2026-001 Version 1.0 Classification Confidential — Internal Use Status Alignment Assessment Owner Compliance & Security Engineering Review Cycle Quarterly Effective Date July 29, 2026 Next Review October 29, 2026 Important Notice This document is an ISO/IEC 27001:2022 Alignment Assessment and Statement of Applicability (SoA). It is produced internally by AegisGate Security, LLC to evaluate the applicability and implementation status of all 93 Annex A controls against the AegisGate Security Platform and its supporting organizational processes.https://aegisgatesecurity.io/compliance/management-review/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/management-review/Management Review Procedure AegisGate Security, LLC Field Value Document ID AG-MGTREV-2026-001 Version 1.0 Classification Confidential — Internal Use Owner Compliance & Security Engineering Approver Chief Executive Officer Review Cycle Annual Effective Date July 29, 2026 Next Review July 29, 2027 1. Purpose This procedure establishes the requirements for conducting Management Reviews of the AegisGate Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 Clause 9.3. Management Reviews ensure that top leadership evaluates the ISMS’s continuing suitability, adequacy, and effectiveness, and drives continuous improvement through informed decision-making.https://aegisgatesecurity.io/compliance/nist-csf/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/nist-csf/NIST Cybersecurity Framework 2.0 Self-Assessment Field Value Document Version 2.0 Classification Confidential — Internal Use Framework Reference NIST Cybersecurity Framework 2.0 (February 2024) Assessment Date 2026-07-29 Document Owner Compliance & Risk Engineering Review Cycle Annual (next review: 2027-07-29) Approval Authority VP, Security Engineering Executive Summary This self-assessment evaluates the AegisGate Security Platform against the NIST Cybersecurity Framework 2.0, covering all six core functions: Govern, Identify, Protect, Detect, Respond, and Recover. AegisGate is a self-hosted, on-premises security gateway for AI infrastructure, designed to provide enterprise-grade security controls while maintaining complete customer data sovereignty.https://aegisgatesecurity.io/security/processing-integrity/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/processing-integrity/Processing Integrity Controls Version: 1.0 Owner: AegisGate Security, LLC Review Cycle: Annual (next review: Q3 2027) Contact: security@aegisgatesecurity.io 1. Purpose This document describes the processing integrity controls implemented in AegisGate Security Platform, mapping to SOC 2 Trust Services Criteria for Processing Integrity (PI1). Processing integrity addresses whether system processing is complete, valid, accurate, timely, and authorized. 2. Processing Integrity Principles Principle Definition AegisGate Control Completeness All processing steps execute without omission Fail-closed architecture — if any check fails, the request is rejected Validity Processing follows defined business rules 1,457 compliance controls validate rules at runtime Accuracy Processing produces correct results Hash-chained audit logs verify output integrity Timeliness Processing occurs within defined timeframes Per-tier rate limiting ensures timely processing Authorization Processing is initiated by authorized parties RBAC + MFA + OIDC/SAML enforce authorization 3.https://aegisgatesecurity.io/security/rto-rpo/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/rto-rpo/Recovery Time and Point Objectives Version: 1.0 Owner: AegisGate Security, LLC Review Cycle: Annual (next review: Q3 2027) Contact: security@aegisgatesecurity.io Overview This document defines AegisGate Security Platform’s Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for each deployment component. These targets support SOC 2 Availability criteria, HIPAA contingency planning requirements (45 C.F.R. § 164.308(a)(7)), and business continuity planning. AegisGate is a self-hosted, on-premises security gateway. Infrastructure recovery is the customer’s responsibility.https://aegisgatesecurity.io/security/training/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/training/Security Awareness Training Program Version: 1.0 Owner: AegisGate Security, LLC Review Cycle: Annual (next review: Q3 2027) Contact: security@aegisgatesecurity.io 1. Purpose This program defines AegisGate Security, LLC’s security awareness training requirements. It satisfies: HIPAA Security Rule § 164.308(a)(5) — Security Awareness Training SOC 2 Common Criteria CC1.3 — Training and Awareness ISO 27001 A.6.3 — Awareness, Education, and Training 2. Training Requirements 2.1 Required Training Modules Module Frequency Target Audience Duration Delivery Security Awareness Foundations Annual All personnel 60 min Self-paced Secure Development Practices Annual Engineering 90 min Self-paced Incident Response Procedures Annual All personnel 45 min Self-paced HIPAA Privacy and Security Annual All personnel with PHI access 60 min Self-paced SOC 2 Compliance Overview Annual All personnel 30 min Self-paced Phishing and Social Engineering Quarterly All personnel 15 min Simulated exercise Secure Configuration Management Annual Engineering 45 min Self-paced Vendor Security Awareness Annual Procurement, management 30 min Self-paced 2.https://aegisgatesecurity.io/security/training-records/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/training-records/Security Training Completion Records Version: 1.0 Owner: AegisGate Security, LLC Review Cycle: Quarterly Contact: security@aegisgatesecurity.io Completion Records Training completions are documented per the Security Awareness Training Program. Individual assessment records are available upon request under NDA. 2026 — Annual Training Cycle ID Module Assigned Roles Completion Deadline Status Completed Assessed By TRN-2026-001 Security Awareness Foundations All personnel 2026-08-29 ✅ Completed 2026-07-29 Security Lead TRN-2026-002 Secure Development Practices Engineering 2026-08-29 ✅ Completed 2026-07-29 VP Engineering TRN-2026-003 Incident Response Procedures All personnel 2026-08-29 ✅ Completed 2026-07-29 Security Lead TRN-2026-004 HIPAA Privacy and Security All personnel with PHI access 2026-08-29 ✅ Completed 2026-07-29 Security Lead TRN-2026-005 SOC 2 Compliance Overview All personnel 2026-08-29 ✅ Completed 2026-07-29 VP Engineering TRN-2026-006 Phishing and Social Engineering All personnel Quarterly ✅ Completed 2026-07-29 Security Lead TRN-2026-007 Secure Configuration Management Engineering 2026-08-29 ✅ Completed 2026-07-29 VP Engineering TRN-2026-008 Vendor Security Awareness Procurement, management 2026-08-29 ✅ Completed 2026-07-29 VP Engineering 2026 — Quarterly Phishing Simulations Quarter Simulation Sent Clicked Reported Click Rate Report Rate Result Q3 2026 Baseline assessment — — — Pending Pending Scheduled 2026-09 Q4 2026 Follow-up — — — Pending Pending Scheduled 2026-12 Assessment Results Minimum passing score: 80%https://aegisgatesecurity.io/compliance/soc2/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/compliance/soc2/SOC 2 Type 1 Readiness Assessment — Self-Assessment AegisGate Security Platform Field Value Document ID AG-SOC2-RA-2026-001 Version 1.0 Classification Confidential — Internal Use Status Readiness Assessment Owner Compliance & Security Engineering Review Cycle Quarterly Effective Date July 29, 2026 Next Review October 29, 2026 Important Notice This document is a SOC 2 Type 1 Readiness Assessment — Self-Assessment. It is produced internally by AegisGate to evaluate control readiness against the AICPA Trust Services Criteria prior to engaging a Certified Public Accountant (CPA) firm for a formal SOC 2 Type 1 examination.https://aegisgatesecurity.io/security/vendor-risk/Wed, 29 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/security/vendor-risk/Vendor Risk Assessment Field Value Document Version 1.0 Owner Security Operations, AegisGate Security, LLC Review Cycle Annual Last Reviewed July 29, 2026 Next Review Q3 2027 Classification Internal & Customer-Facing 1. Purpose This document provides a comprehensive risk assessment of all third-party vendors and subprocessors engaged by AegisGate Security, LLC. It evaluates each vendor’s security posture, data handling practices, and associated risks in accordance with AegisGate’s vendor risk management framework and applicable data protection regulations.https://aegisgatesecurity.io/blog/case-study-series-b-saas-soc2-with-trust-framework/Tue, 21 Jul 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/case-study-series-b-saas-soc2-with-trust-framework/📋 Note: This is a composite case study built from anonymized customer patterns observed in our beta program (January–June 2026). It is not a real customer. The names, numbers, and quotes below are representative of the customer segment and are not tied to any specific organization. We publish composite case studies to illustrate the value of AegisGate without disclosing customer information. Real customer case studies will be published with explicit written consent.https://aegisgatesecurity.io/blog/eu-ai-framework-live-demo/Thu, 11 Jun 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/eu-ai-framework-live-demo/AegisGate v3.3: EU AI Act Framework Alignment, and a Live Demo You Can Actually Touch Published: 11 June 2026 Author: AegisGate Security Team Two things shipped this week that we think matter for anyone shipping AI to the EU. The Compliance Reality Nobody Wants to Talk About The EU AI Act didn’t arrive with a soft deadline. As of 2 August 2025, the obligations on providers of high-risk AI systems are enforceable.https://aegisgatesecurity.io/cve/aegis-2026-0001/Mon, 01 Jun 2026 00:00:00 +0000https://aegisgatesecurity.io/cve/aegis-2026-0001/AEGIS-2026-0001 — Prompt injection via Markdown image alt-text Field Value CVE-ID AEGIS-2026-0001 Severity HIGH (CVSS 7.5) CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected anthropic/claude-3-5-sonnet@<20241022 Fixed anthropic/claude-3-5-sonnet@20241022 Discovered by AegisGate Research Disclosed 2026-06-01 Published 2026-07-29 Description An attacker can inject instructions into a model prompt by including carefully crafted Markdown image alt-text that is rendered as part of the model’s context window. This vulnerability affects LLM-powered document-processing pipelines that render Markdown content without sanitizing alt-text attributes.https://aegisgatesecurity.io/blog/v2.0.0-a2a-security-launch/Tue, 05 May 2026 00:00:00 +0000https://aegisgatesecurity.io/blog/v2.0.0-a2a-security-launch/AegisGate Platform v2.0.0 — A2A Security is Here We are proud to announce AegisGate Security Platform v2.0.0, the first release that brings Agent-to-Agent (A2A) security guardrails to the open-source world. This major version completes the trifecta: HTTP API security, MCP protocol protection, and A2A agent security — all in a single platform. 🎯 What’s New in v2.0.0 Feature Description A2A Guardrails Middleware mTLS authentication, HMAC-SHA256 integrity verification, per-agent capability enforcement, token-bucket rate limiting, and optional license validation Prometheus Metrics aegisgate_a2a_license_failures_total, aegisgate_a2a_auth_failures_total, aegisgate_a2a_integrity_failures_total, aegisgate_a2a_capability_denials_total Configuration configs/a2a.https://aegisgatesecurity.io/sla/Tue, 05 May 2026 00:00:00 +0000https://aegisgatesecurity.io/sla/Service Level Agreements & Objectives AegisGate Security Platform publishes transparent service level commitments for every tier. These aren’t aspirational — they’re measurable against the /health, /metrics, and /api/v1/sla endpoints. SLA by Tier Commitment Community Developer Professional Enterprise Uptime Target 99.0% 99.9% 99.95% 99.99% Support Response Best-effort (community) 24 hours 4 hours 1 hour Support Channel GitHub Issues Email + Priority Issues Dedicated channel 24/7 + Slack Incident Response No SLA 8h (P1), 24h (P2) 2h (P1), 8h (P2) 30min (P1), 2h (P2) Data Retention 7 days 90 days 365 days Custom Uptime Downtime/Year ~3.https://aegisgatesecurity.io/404/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/404/404 — Page Not Found The page you are looking for does not exist on aegisgatesecurity.io. It may have been moved, renamed, or never existed. Possible reasons: The URL was mistyped The page has been retired (we sometimes remove old blog posts or docs) The link came from an outdated source What you can do: Go to the homepage Browse the docs Read the changelog Check the pricing page Search via your browser’s search bar (Ctrl+K, then type) If you believe this is a bug, please open an issue on GitHub or email security@aegisgatesecurity.https://aegisgatesecurity.io/legal/acceptable-use/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/acceptable-use/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. ACCEPTABLE USE POLICY Effective Date: June 1, 2026 Version: 1.https://aegisgatesecurity.io/legal/accessibility/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/accessibility/Accessibility Statement AegisGate Security, LLC Last Updated: July 29, 2026 1. Our Commitment to Accessibility AegisGate Security, LLC (“AegisGate,” “we,” “us,” “our”) is committed to ensuring that our digital products and services are accessible to all individuals, including those with disabilities. We believe that accessible design benefits everyone and that equal access to information and technology is a fundamental right. We strive to make our website, applications, and documentation perceivable, operable, understandable, and robust for all users, in accordance with the principles outlined in the Web Content Accessibility Guidelines (WCAG) 2.https://aegisgatesecurity.io/docs/api-stability/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/api-stability/API Versioning AegisGate uses URL-based API versioning. All endpoints are prefixed with /api/v{N}/ where {N} is the major version number. Current version: v1 (stable since 3.0.0) Examples: GET /api/v1/compliance/scan POST /api/v1/compliance/report?framework=atlas GET /api/v1/compliance/integrity GET /api/v1/sla Stability Guarantees Guarantee Scope Details No breaking changes within v1 Endpoints All v1 endpoints maintain backward compatibility Additive only Fields New fields may be added to responses; clients must ignore unknown fields Deprecated fields Fields Deprecated fields are maintained for at least 2 minor versions (6+ months) HTTP status codes Responses Status codes will not change for existing error conditions Rate limiting Headers X-RateLimit-* headers are contractually stable What Counts as a Breaking Change A breaking change is any change that would cause a correctly-implemented client to fail:https://aegisgatesecurity.io/legal/beta-agreement/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/beta-agreement/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, beta participants should rely on this document at their own risk and consult their own legal counsel. AegisGate Beta User Agreement Effective Date: 2026-06-07 Version: 1.https://aegisgatesecurity.io/legal/baa/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/baa/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred until budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. Business Associate Agreement Effective Date: Effective upon execution Version: 1.https://aegisgatesecurity.io/changelog/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/changelog/Changelog All notable changes to AegisGate Security Platform are documented here. For the engineering-complete commit log, see the GitHub CHANGELOG. v4.5.0 - 2026-09-19 - Threat Detection Enhancement Release v4.5.0 adds five new detection capabilities (P1-P5), two new ATLAS techniques (T1110 Brute Force, T1552 Unsecured Credentials), four distillation attack detectors (GAP-DIST2-5), and seven new L1 scanner patterns closing real-world attack gaps identified through internal adversarial testing. 100% detection rate on 24 real-world attack payloads, 0% false positives.https://aegisgatesecurity.io/legal/cookies/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/cookies/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and end users should rely on this document at their own risk and consult their own legal counsel. Cookie Policy Effective Date: 2026-06-07 Version: 2.https://aegisgatesecurity.io/docs/customer-portal/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/customer-portal/Customer Portal The AegisGate Customer Portal is a self-service web application for managing your organization’s account, viewing usage metrics, accessing invoices, and downloading compliance documents. The portal runs as a companion service alongside the main AegisGate platform. Architecture The Customer Portal is a lightweight Go HTTP server that provides: Profile management — Organization details, plan information, and renewal dates License information — Current tier, feature access, and expiration status Subscription management — Billing details, payment methods, and next billing date Usage analytics — API and MCP request counts against tier caps Invoice access — Download past invoices and receipts Compliance documents — BAA, DPA, and SOC2 reports Quick Start # Run the Customer Portal (defaults to port 8081) go run cmd/customer-portal/main.https://aegisgatesecurity.io/legal/dpa/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/dpa/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. Data Processing Agreement First published: 2026-06-07 (v4.https://aegisgatesecurity.io/docs/detection-coverage/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/detection-coverage/Overall Score AegisGate v4.5.0 achieves 99.8/100 evasion resistance with ML threat detection enabled (up from 88.5/100 regex-only), validated against the MITRE ATLAS framework with the following metrics: Metric v3.6.2 (regex-only) v4.5.0 (regex + ML) Overall Evasion Resistance 88.5 / 100 100 / 100 False Positive Rate 0.0% (10,538 benign) 0.0% (10,538 benign) True Positive Rate 78.8% (41/52 patterns) 100% (52/52 patterns) ML Inference Latency N/A 4.78ms avg, 5.27ms max Per-Category Coverage Category Techniques TPR Evasion Resistance Key Defenses Prompt Injection (T1535) 5 patterns 100% 98/100 Regex pattern matching, heuristic fallback LLM Jailbreak (T1484) 5 patterns 80% 92/100 Role-play detection, boundary enforcement Prompt Extraction (T1632) 5 patterns 80% 90/100 System prompt leak detection Data Extraction (T1589) 5 patterns 80% 88/100 PII/PHI pattern detection Indirect Injection (T1584) 5 patterns 80% 85/100 Context-aware pattern matching Vector DB Poisoning (T1600) 3 patterns 100% 95/100 Content injection detection Content Injection (T1613) 3 patterns 100% 93/100 Payload pattern matching Plugin Exploitation (T1563) 3 patterns 67% 80/100 Tool authorization enforcement Defense Evasion (T1622) 3 patterns 67% 82/100 Obfuscation detection, normalization Credential Forgery (T1606) 2 patterns 100% 96/100 API key pattern detection MFA Bypass (T1621) 2 patterns 100% 95/100 Authentication manipulation detection Elevation Abuse (T1548) 2 patterns 100% 94/100 Privilege escalation detection Inhibit Recovery (T1490) 2 patterns 100% 92/100 Safety bypass detection Denial of Service (T1498) 2 patterns 100% 90/100 Rate limiting, resource boundaries Endpoint Denial (T1499) 2 patterns 100% 91/100 Rate limiting, request validation Config Exfiltration (T1602) 2 patterns 100% 93/100 Configuration leak detection Resource Exhaustion (T1648) 1 pattern 100% 88/100 Per-session resource limits Evasion Resistance Methodology The evasion resistance scores are derived from a rigorous adversarial testing methodology:https://aegisgatesecurity.io/legal/eula/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/eula/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. END-USER LICENSE AGREEMENT AegisGate Security Platformhttps://aegisgatesecurity.io/eu-ai-act/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/eu-ai-act/European Union flag v4.2.0 (GA): The EU AI Act Compliance Module is fully implemented and tested. Beta status: counsel review of the legal interpretation is pending (v3.4.0+). Use for evaluation and pre-audit work. What is the EU AI Act? The EU AI Act (Regulation 2024/1689) is the world’s first comprehensive AI regulation. It entered into force on August 1, 2024, and applies to: AI providers that place AI systems on the EU market Deployers of AI systems in the EU Providers and deployers outside the EU if the AI system’s output is used in the EU The Act is being phased in over 2 years, with key dates:https://aegisgatesecurity.io/docs/faq/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/faq/Frequently Asked Questions What is AegisGate? AegisGate is an AI security platform that acts as a gateway for your AI infrastructure. It provides: Bidirectional scanning of every API request and response MCP protocol protection for AI agent tool execution A2A protocol protection for agent-to-agent communication Threat detection across 223 patterns with ML-based adversarial detection Compliance reporting for 31 frameworks (SOC 2, HIPAA, EU AI Act, FedRAMP, and more) Trust Framework with per-session trust scoring and signed attestations How does AegisGate work?https://aegisgatesecurity.io/docs/graceful-degradation/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/graceful-degradation/Overview AegisGate uses a layered defense architecture where rule-based detection serves as the always-on foundation, with ML threat detection as an additional layer. When ML is disabled or unavailable, the platform gracefully degrades to rules-only mode with zero loss of deterministic protection. This means: Rule-based detection never shuts down. It runs on every request regardless of ML status. ML threat detection is additive. It provides an extra security layer when enabled.https://aegisgatesecurity.io/docs/installation/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/installation/Installation AegisGate can be deployed via Docker, Kubernetes, or direct binary installation. Docker (Recommended) The fastest way to get started: # Pull the latest image docker pull ghcr.io/aegisgatesecurity/aegisgate-platform:latest # Run with default ports docker run -d \ --name aegisgate \ -p 8080:8080 \ -p 8081:8081 \ -p 8443:8443 \ ghcr.io/aegisgatesecurity/aegisgate-platform:latest With persistent configuration: docker run -d \ --name aegisgate \ -p 8080:8080 \ -p 8081:8081 \ -p 8443:8443 \ -v /path/to/config.https://aegisgatesecurity.io/docs/license-portal/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/license-portal/License Portal AegisGate uses a client-side license validation system powered by ECDSA P-256 cryptographic signatures. No remote API calls are required for license checks — all validation happens locally on your infrastructure. How Licenses Work Every AegisGate license key is a base64-encoded JSON structure containing: Field Description license_id Unique license identifier (UUID) tier License tier: community, developer, professional, or enterprise customer Customer identifier issued_at RFC3339 timestamp expires_at RFC3339 timestamp or "never" for perpetual licenses features Optional feature flags array signature ECDSA P-256 signature covering all other fields Activation Docker docker run -d \ -p 8080:8080 -p 8081:8081 -p 8443:8443 \ -e AEGISGATE_LICENSE_KEY="base64-encoded-license-key" \ ghcr.https://aegisgatesecurity.io/atlas/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/atlas/AegisGate × MITRE ATLAS MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is the definitive framework for understanding adversarial attacks against AI. AegisGate is the only AI security platform with native ATLAS coverage across all five attack surfaces: HTTP APIs, MCP tool use, A2A inter-agent communication, ACP protocol security, and AI response scanning. Why ATLAS Matters AI systems face unique adversarial techniques that traditional security tools don’t address. ATLAS catalogs 66 techniques — from prompt injection to agent impersonation to model extraction.https://aegisgatesecurity.io/legal/nda/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/nda/MUTUAL NON-DISCLOSURE AGREEMENT Effective Date: Effective upon execution Version: 1.0 DRAFT RECITALS This Mutual Non-Disclosure Agreement (“Agreement”) is entered into by and between: Party 1: AegisGate Security, LLC (“AegisGate”) Party 2: [OTHER PARTY NAME] (“Recipient”) (Each a “Party,” collectively the “Parties”) 1. PURPOSE The Parties wish to explore a potential business relationship concerning the AegisGate Security Platform and related services. In connection with this, each Party may disclose to the other certain confidential and proprietary information.https://aegisgatesecurity.io/docs/onboarding/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/onboarding/Onboarding Guide Welcome to AegisGate Security Platform. This guide walks you through getting up and running in 5 steps — no DevOps or Kubernetes expertise required. Step 1: Deploy AegisGate Option A: Guided Setup (recommended for new users) # Build the binary go build -o aegisgate-platform ./cmd/aegisgate-platform/ # Auto-detect your environment and generate a validated config ./aegisgate-platform setup --non-interactive # Start the platform ./aegisgate-platform --config aegisgate-platform.yaml --embedded-mcp The setup wizard detects Docker, Kubernetes, systemd, or bare metal; recommends a deploy profile; and generates a validated config file.https://aegisgatesecurity.io/legal/license/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/license/Open-Core License — Apache 2.0 Community Edition AegisGate Security Platform uses an open-source licensing model: Community edition — Released under the Apache License 2.0. This includes the core proxy, detection engine, MCP/A2A/ACP/ANP protocol protection, response scanning, and 4 community compliance frameworks (OWASP LLM Top 10, OWASP Web Top 10, MITRE ATLAS, NIST AI RMF). Enterprise modules — Governed by a separate commercial license. These include the Trust Framework, SIEM dispatcher, premium compliance frameworks (HIPAA, PCI-DSS, SOC 2, ISO 27001, FedRAMP, and 22 others), ML model training, and the trust portal.https://aegisgatesecurity.io/pricing/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/pricing/Simple, transparent pricing. No hidden fees. Start free, upgrade when you are ready. Patent Pending — AegisGate technologies are patent pending (US Provisional App. Nos. 64/153,573–64/153,577). 🛡️ AegisGate Lens — Free, forever. Privacy-first browser extension that protects users across 10 AI providers with 5-facet detection. Learn more · Lens vs Platform · Chrome · Firefox ⚡ AegisGate Rampart — Free, forever. Local proxy + IDE plugin for developers. Works with VS Code, JetBrains, Neovim, and any LSP editor.https://aegisgatesecurity.io/legal/privacy/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/privacy/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and end users should rely on this document at their own risk and consult their own legal counsel. Privacy Policy AegisGate Security Platformhttps://aegisgatesecurity.io/docs/quick-reference/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/quick-reference/Quick Reference Essential commands and configuration for AegisGate. Common Commands # Start AegisGate docker run -d -p 8080:8080 -p 8081:8081 -p 8443:8443 ghcr.io/aegisgatesecurity/aegisgate-platform:latest # Check health curl http://localhost:8443/health # Scan content curl -X POST http://localhost:8443/v1/scan -d '{"content": "test"}' # View stats curl http://localhost:8443/stats # Get version curl http://localhost:8443/version Environment Variables Variable Default Description AEGIS_LICENSE community License tier AEGIS_LOG_LEVEL info Log verbosity AEGIS_PROXY_PORT 8080 HTTP proxy port AEGIS_MCP_PORT 8081 MCP server port AEGIS_DASHBOARD_PORT 8443 Dashboard port AEGIS_RATE_LIMIT 1000 Requests per minute API Endpoints Method Endpoint Description GET /health System health GET /stats Platform statistics GET /version Version info POST /v1/scan Scan content GET /api/v1/config Current configuration POST /api/v1/compliance Generate compliance report Port Reference Port Service Protocol 8080 HTTP Proxy HTTP 8081 MCP Server HTTP/gRPC 8443 Dashboard/API HTTPS Detection Patterns 223 threat signatures Real-time pattern matching Configurable severity levels Compliance Frameworks MITRE ATLAS • OWASP LLM • NIST AI RMF • ISO 27001 • SOC2 • HIPAA • GDPR • PCI-DSShttps://aegisgatesecurity.io/docs/security/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/security/Security Architecture AegisGate secures AI infrastructure across three pillars — every request is verified, every agent is authenticated, and every failure denies by default. Fail-Closed Default AegisGate is a security product. When in doubt, we deny. If any security check fails, encounters an error, or receives unexpected input, the request is rejected — never silently allowed through. This applies across all three pillars: Scenario Behavior Missing authentication header 403 Forbidden Unregistered compliance framework Error + fail Invalid license key 403 Forbidden (no silent downgrade) Nil/missing security handler Deny Internal panic Recover + deny Missing A2A capability header 403 Forbidden Pillar 1: HTTP API Security AegisGate scans all HTTP traffic using 223 detection patterns covering:https://aegisgatesecurity.io/legal/security-addendum/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/security-addendum/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. SECURITY ADDENDUM Effective Date: Effective upon execution Version: 1.https://aegisgatesecurity.io/legal/subprocessors/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/subprocessors/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. Subprocessor List Effective Date: 2026-06-07 Version: 2.https://aegisgatesecurity.io/docs/tco-calculator/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/tco-calculator/AI Security TCO Calculator AegisGate’s self-hosted architecture dramatically reduces total cost of ownership compared to SaaS-only solutions or building an AI security platform in-house. By eliminating per-request fees, providing built-in compliance mappings, and leveraging open-source community contributions, AegisGate delivers enterprise-grade AI security at a fraction of the cost. Cost Comparison Table Cost Factor AegisGate (Self-Hosted) SaaS AI Security Build In-House License Free (Community) / tiered paid $0.50-2.00/request N/A Infrastructure Your infra (~$50-200/mo) Included (markup 3-5x) Your infra + development Development 0 (open source) 0 $200K-500K (6-12 months) Maintenance Community + vendor patches Included $50-100K/year (1-2 engineers) Compliance Mapping Built-in (FedRAMP, SOC2, NIST, ATLAS) Manual or partial Manual ($50-100K) Incident Response Built-in playbooks + attestation Manual Build from scratch ($100K+) SIEM Integration Built-in (10+ platforms) API only Build from scratch ($50K+) ATLAS Coverage 52 patterns, 17 categories 8-20 patterns Start from scratch FPR Cost (false positives) ~0% (measured) 1-5% (staff time) Unknown until deployed 3-Year TCO (10K req/day) $10K-50K $180K-540K $500K-1.https://aegisgatesecurity.io/tech/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/tech/Architecture Overview AegisGate v4.2.0 secures AI interactions across six pillars — five protocol layers (HTTP API, MCP, A2A, ACP, RESPONSE) plus the Trust Framework — in a single 19.1 MB binary. flowchart TB subgraph Client["Client Layer"] A["HTTP Client"] B["MCP Client"] C["A2A Agent"] D["ACP Agent"] E["ANP Client"] end subgraph AegisGate["AegisGate Platform v4.2.0"] G["HTTP Proxy :8080"] H["MCP Server :8081"] I["A2A Endpoint :8082"] J["ACP Gateway :8083"] K["ANP Router :8084"] L["RESPONSE Guard"] TR["Trust Framework\nPkg/trust/\n(v4.2.0)"] M["https://aegisgatesecurity.io/legal/terms/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/legal/terms/📋 DRAFT — Not Legal Advice This document is self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and this document does not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on this document at their own risk and consult their own legal counsel. Terms of Service AegisGate Security Platformhttps://aegisgatesecurity.io/docs/tiers/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/tiers/Tier Comparison Choose the coverage that matches your compliance needs. Feature Community Developer Professional Enterprise Price Free $79/mo $499/mo Custom MCP Guardrails 8 8 8 8 Detection Patterns 223+ 223+ 223+ 223+ Proxy Rate Limit Soft-throttle (no hard cap) 1,000 RPM 10,000 RPM Unlimited MCP Rate Limit Soft-throttle (no hard cap) 500 RPM 5,000 RPM Unlimited Max Users 5 25 100 Unlimited Max Agents 5 25 100 Unlimited RBAC ❌ ✅ ✅ ✅ Custom Roles ❌ ✅ ✅ ✅ SSO (OIDC/SAML) ❌ ✅ ✅ ✅ Circuit Breaker ❌ ✅ ✅ ✅ Audit Logs 7 days 30 days 90 days 1 year Prompt Injection Detection ✅ ✅ ✅ ✅ PII/Secret Scanning ✅ ✅ ✅ ✅ MITRE ATLAS ✅ ✅ ✅ ✅ NIST AI RMF ✅ ✅ ✅ ✅ OWASP LLM Top 10 ✅ ✅ ✅ ✅ OWASP Web Top 10 ✅ ✅ ✅ ✅ mTLS ❌ ✅ ✅ ✅ Code Exec Sandbox ❌ ✅ ✅ ✅ Compliance Reports ❌ Basic Advanced Full HIPAA (add-on) ❌ $149/mo $149/mo $149/mo PCI-DSS (add-on) ❌ $149/mo $149/mo $149/mo SOC 2 (add-on) ❌ $149/mo $149/mo $149/mo ISO 27001 (add-on) ❌ $149/mo $149/mo $149/mo CCPA/CPRA (add-on) ❌ $149/mo $149/mo $149/mo GDPR (add-on) ❌ $149/mo $149/mo $149/mo CIS Controls v8 (add-on) ❌ ❌ $79/mo $79/mo NIST CSF 2.https://aegisgatesecurity.io/docs/troubleshooting/Mon, 01 Jan 0001 00:00:00 +0000https://aegisgatesecurity.io/docs/troubleshooting/Troubleshooting Guide Common issues and solutions for AegisGate Security Platform. For deployment help, try the Guided Setup setup first — it auto-detects your environment and generates a validated config. Container Won’t Start Symptom: Docker container exits immediately after starting. Solutions: Check container logs: docker logs aegisgate Verify ports are available: netstat -tlnp | grep -E '8080|8081|8443' Ensure ports are not already in use by another service. Validate your config file: