Content
<div align="center">
# 🛡️ AegisGate Security Platform
**Secure every AI interaction. Six pillars. One gateway. Zero external dependencies.**
[](https://github.com/aegisgatesecurity/aegisgate-platform/releases/tag/v4.0.0)
[](LICENSE)
[](https://golang.org/)
[](https://github.com/aegisgatesecurity/aegisgate-platform/actions)
[](https://github.com/aegisgatesecurity/aegisgate-platform/actions)
[](docs/compliance/eu-ai-act.md)
[](upstream/aegisgate/pkg/siem/)
[](pkg/ml/)
[](https://github.com/aegisgatesecurity/aegisgate-lens)
[](https://github.com/aegisgatesecurity/aegisgate-platform/actions/workflows/security.yml)
[](./SECURITY.md)
[](https://github.com/aegisgatesecurity/aegisgate-platform/network/dependencies)
[🌐 Website](https://aegisgatesecurity.io) · [🚀 Live Demo](https://demo.aegisgatesecurity.io/) · [📊 Pricing](https://aegisgatesecurity.io/pricing/) · [📚 Docs](https://aegisgatesecurity.io/docs/) · [🔒 Security](SECURITY.md) · [💬 Discussions](https://github.com/aegisgatesecurity/aegisgate-platform/discussions)
</div>
> **We follow [GitHub's recommended security practices](https://securitylab.github.com/resources/five-easy-steps-to-secure-your-open-source-project/) for open source projects.** CodeQL scanning · Secret scanning with push protection · Dependabot alerts & security updates · Protected branches · RFC 9116 security policy · [Report a vulnerability →](./SECURITY.md)
---
> **🧩 Using AI without enterprise protections?** [AegisGate Lens](https://github.com/aegisgatesecurity/aegisgate-lens) is our free browser extension that brings 153 detection patterns to everyday AI conversations — for the 95% of users who don't have a security gateway. [Install Lens →](https://github.com/aegisgatesecurity/aegisgate-lens)
---
## Why AegisGate?
Every AI interaction is an attack surface. Prompt injections leak secrets. MCP servers exfiltrate context. A2A agents escalate privileges across trust boundaries. A single misconfigured LLM response can expose PII, violate compliance, or hand an attacker a credential.
AegisGate sits in front of all of it — one binary, zero dependencies, fail-closed by default.
- **Zero-cost proxy.** -2.8ms p99 overhead (faster than direct). Blocked requests resolve in 7.2ms p50. 23,578 RPS with 0% errors at 5,000 VUs.
- **Fail-closed.** If AegisGate can't scan a response, it blocks it. No silent failures, no pass-through on error.
- **Self-hosted.** No API keys to rotate, no third-party to trust. Your data stays in your infrastructure.
- **6 pillars, one gateway.** HTTP, MCP, A2A, ACP, RESPONSE, and Trust — no patchwork of point products.
- **153 detection patterns.** Secrets, XSS, PII, and compliance — wired into every response, every time.
- **Red-team hardened.** 100/100 evasion resistance with ML, 88.5/100 rules-only (2,600-test suite). 25 adversarial attack chain scenarios. 29 automated security tests. TRACE/TRACK rejected. All security headers present. No `unsafe-eval` in CSP.
## Security Posture
| Metric | Value |
|--------|-------|
| CVEs | **0** |
| Evasion resistance (with ML) | **100 / 100** |
| Evasion resistance (rules-only) | **88.5 / 100** |
| Evasion test suite | **2,600 tests** |
| Adversarial attack chains | **25 scenarios** |
| Automated security tests | **29** |
| Fail-closed by default | ✅ |
| TRACE/CONNECT/TRACK blocked | ✅ |
| Security headers (CSP, CORP, COEP, COOP, HSTS) | ✅ |
| Private keys in git | **0** (rotated, gitignored, pre-commit blocked) |
| Code-scanning alerts open | **0** |
| Dependabot alerts open | **0** |
## Request Flow
```mermaid
flowchart LR
Client["👤 Client / Agent"] -->|"HTTP · MCP · A2A"| Gateway["🛡️ AegisGate"]
subgraph Pillars["6 Protection Pillars"]
direction TB
HTTP["HTTP API<br/>pkg/response/"]
MCP["MCP<br/>pkg/mcpserver/"]
A2A["A2A<br/>pkg/a2a/"]
ACP["ACP<br/>pkg/acp/"]
RESP["RESPONSE<br/>pkg/response/detectors/"]
TRUST["Trust<br/>pkg/attestation/"]
end
Gateway --> Pillars
Pillars -->|"Scanned ✅"| LLM["🤖 LLM / AI Service"]
Pillars -->|"Blocked ❌"| Client
LLM -->|"Response"| Gateway
Gateway -->|"Clean"| Client
Gateway -->|"Sanitized / Rejected"| Client
subgraph Infra["Infrastructure"]
PG[("PostgreSQL<br/>persistence")]
Redis[("Redis<br/>rate limiting")]
end
Gateway --- Infra
```
## Detection Engine
The `pkg/response/detectors/` package provides 153 regex patterns with full Lens parity:
| Category | Patterns | What it catches |
|----------|----------|-----------------|
| **Secrets** | 45 | AWS keys, GitHub PATs, Stripe keys, JWTs, GitLab tokens, Twilio, SendGrid, private keys |
| **XSS** | 12 | `<script>`, event handlers, `javascript:`, SVG-based, encoded variants |
| **PII (US Core)** | 15 | SSN, phone, DOB, MRN, ZIP+4, full names with context |
| **PII (Extended)** | 13 | Email, IP addresses, passport numbers, driver's licenses |
| **PII (International)** | 9 | National IDs (NHS, SIN, TFN, IRD, BSN, CF, SSN-IT, NRIC, MyNumber) |
| **PII (Financial)** | 24 | Credit cards, IBANs, SWIFT/BIC, routing numbers |
| **Compliance** | 35 | GDPR data types, HIPAA PHI indicators, PCI-DSS card data, CCPA personal info |
```go
import "github.com/aegisgatesecurity/aegisgate-platform/pkg/response/detectors"
// Scan all 153 patterns
matches := detectors.DetectAll(text)
// Scan by category
secrets := detectors.DetectSecrets(text)
xss := detectors.DetectXSS(text)
pii := detectors.DetectPIIUSCore(text)
compliance := detectors.DetectCompliance(text)
// Wired into ResponseGuard (default: enabled)
guard := response.NewResponseGuard()
result, _ := guard.Scan(ctx, text)
// result.DetectedXSS, result.DetectedCompliance, result.DetectedPII, result.DetectedSecrets
```
## How AegisGate Compares
| Capability | AegisGate | Generic AI Firewalls |
|------------|-----------|----------------------|
| HTTP API scanning | ✅ Native | ✅ |
| MCP guardrails | ✅ Native | ❌ Plugin or missing |
| A2A protocol security | ✅ Native | ❌ Not supported |
| ACP enforcement | ✅ Native | ❌ Not supported |
| Response scanning (153 patterns) | ✅ Built-in | ⚠️ Limited or external |
| Cryptographic attestation | ✅ Native | ❌ Not available |
| Self-hosted, zero dependencies | ✅ Single binary | ❌ Requires external services |
| Fail-closed by default | ✅ | ⚠️ Often fail-open |
| 27 compliance frameworks | ✅ | ⚠️ 3–5 typical |
| PostgreSQL + file persistence | ✅ | ⚠️ Cloud-locked |
| HA clustering | ✅ Native | ⚠️ Enterprise add-on |
| Open source (Apache 2.0) | ✅ | ❌ Proprietary |
## v3.6.2 Highlights
| Feature | Description |
|---------|-------------|
| **FedRAMP 151/170 Automated (88.8%)** | Compliance Engine v2: 69 controls promoted from manual/stub to real CheckFuncs. 19 remaining are customer-responsibility. |
| **gRPC Service Layer** | 7 services, 50 RPCs with health checking, reflection, and TLS |
| **Trust API Attestation** | Cryptographic attestation generation and verification (RFC 3161 TSA) |
| **SIEM 11/11 Platform Coverage** | Splunk, Elasticsearch, QRadar, Sentinel, SumoLogic, LogRhythm, ArcSight, Syslog, **Datadog**, **CloudWatch**, **SecurityHub** |
| **SIEM Event Durability** | BufferConfig.Persist with JSON-lines file persistence and replay on startup |
| **Incident PostgreSQL Backend** | Full PostgreSQL persistence for incidents, playbooks, and detection rules (7 stores, 7 migrations) |
| **SSO Persistence** | PostgreSQL-backed OIDC session storage with TTL and ACR value mapping |
| **Token Analytics** | Per-request token usage metrics wired into the request pipeline |
| **PDF Export** | Questionnaire results export to formatted PDF with scoring and evidence citations |
| **Reporting Delivery** | Webhook (HTTP POST) and Email (SMTP+STARTTLS) delivery handlers |
| **Reporting Templates** | Custom template execution with TemplateID lookup and HTML generation |
| **CSV Data Export** | Full recursive Section/Key/Value flattening (was metadata-only headers) |
| **153-Pattern Detection Engine** | Full Lens parity: 45 secrets, 12 XSS, 15+13+9+24 PII, 35 compliance patterns |
| **PostgreSQL Persistence** | 8 integration test suites via testcontainers-go (IOC, audit, sessions, multi-tenant, correlation, attestation, RBAC, incident) |
| **HA Clustering** | Multi-node deployments with distributed rate limiting, instance identity, and health checks |
| **Performance** | Zero-cost proxy (-2.8ms p99), 15K+ RPS sustained, ATLAS p99 10.7ms (81% improvement) |
| **Security Hardening** | 5 auth bypass fixes, localhost-only metrics, CSP hardening. 100/100 evasion resistance with ML (2,600-test suite), 25 attack chains |
## 6 Pillars
| Pillar | Package | Description |
|--------|---------|-------------|
| HTTP API | `pkg/response/` | Request/response scanning, PII redaction, secret masking |
| MCP | `pkg/mcpserver/` | Model Context Protocol guardrails |
| A2A | `pkg/a2a/` | Agent-to-Agent protocol security |
| ACP | `pkg/acp/` | Agent Capability Policy enforcement |
| RESPONSE | `pkg/response/detectors/` | 153-pattern detection (secrets, XSS, PII, compliance) |
| Trust Framework | `pkg/attestation/`, `pkg/trust/` | Cryptographic attestation, CISO posture digest |
## Compliance Coverage
| Framework | Controls | Package |
|-----------|----------|---------|
| EU AI Act | 82 | `pkg/compliance/eu-ai-act/` |
| FedRAMP (NIST 800-53) | 170 (151 automated) | `pkg/compliance/fedramp/` |
| SOC 2 Type II | 5 | `pkg/compliance/soc2/` |
| ISO 27001 | 14 | `pkg/compliance/iso27001/` |
| ISO 42001 | 8 | `pkg/compliance/iso42001/` |
| HITRUST CSF | 6 | `pkg/compliance/hitrust/` |
| TISAX | 7 | `pkg/compliance/tisax/` |
| CMMC Level 2 | 14 | `pkg/compliance/cmmcl2/` |
| NIST 800-171 | 14 | `pkg/compliance/nist800171/` |
| FIPS 140-2/3 | 11 | `pkg/compliance/fips/` |
| NIST AI RMF | 8 | `pkg/compliance/nist_ai_rmf/` |
| NIST AI 600-1 | 12 | `pkg/compliance/nist_ai_600_1/` |
| NIST CSF 2.0 | 6 | `pkg/compliance/nist_csf/` |
| CIS Controls v8 | 15 | `pkg/compliance/cis/` |
| CSA STAR Level 1 | 16 | `pkg/compliance/csa_star/` |
| CCPA/CPRA | 7 | `pkg/compliance/ccpa/` |
| HIPAA | 11 | `pkg/compliance/hipaa/` |
| PCI-DSS | 12 | `pkg/compliance/pci/` |
| SOX | 6 | `pkg/compliance/sox/` |
| GLBA | 6 | `pkg/compliance/glba/` |
| FERPA | 5 | `pkg/compliance/ferpa/` |
| CJIS | 8 | `pkg/compliance/cjis/` |
| NERC CIP | 14 | `pkg/compliance/nerc_cip/` |
| GDPR | 6 | `pkg/compliance/community/gdpr/` |
| OWASP LLM Top 10 | 10 | `pkg/compliance/community/owasp/` |
| MITRE ATLAS | 66 | `pkg/compliance/community/atlas/` |
| OWASP Web Top 10 | 10 | `pkg/compliance/owasp_web/` |
## Quick Start
```bash
# Build
go build -o aegisgate ./cmd/aegisgate-platform
# Run with defaults (in-memory stores)
./aegisgate
# Run with PostgreSQL
export DATABASE_URL="postgres://user:pass@localhost:5432/aegisgate"
./aegisgate
# Run integration tests (requires Docker)
go test -tags=integration -timeout 300s ./pkg/ioc/... ./pkg/persistence/...
```
## Architecture
```
cmd/aegisgate-platform/ # Binary entry point
pkg/
├── a2a/ # Agent-to-Agent security
├── acp/ # Agent Capability Policy
├── attestation/ # Cryptographic envelope (Sign/Verify/VerifyWithKey/VerifyOnline)
├── audit/soc2/ # SOC 2 evidence collection
├── compliance/ # 27 framework modules
├── cluster/ # HA clustering & distributed rate limiting
├── correlation/ # Event correlation engine
├── cve/ # CVE-for-AI feed
├── detectors/ # 153-pattern detection engine
├── evaluator/ # Adversarial benchmark suite
├── incident/ # Incident response (PostgreSQL + in-memory)
├── ioc/ # IOC management
├── mcpserver/ # MCP guardrails
├── persistence/ # Storage backends (file + PostgreSQL)
├── rbac/ # Role-based access control
├── response/ # 6-pillar response guard
├── trust/ # Trust Framework (6 sub-packages)
└── testdb/ # Shared testcontainers infrastructure
```
## Testing
```bash
# Unit tests (102 packages)
go test ./...
# Integration tests (8 PostgreSQL packages, requires Docker)
go test -tags=integration -timeout 300s ./pkg/ioc/... ./pkg/persistence/... ./pkg/rbac/... ./pkg/attestation/... ./pkg/correlation/... ./pkg/incident/... ./pkg/rbac/... \
./pkg/license/... ./pkg/correlation/... ./pkg/attestation/...
# Coverage
go test -coverprofile=coverage.out ./...
go tool cover -func=coverage.out | grep total
```
## License
Apache 2.0 — see [LICENSE](LICENSE).
## Security
See [SECURITY.md](SECURITY.md) for vulnerability reporting. See [govulncheck.toml](govulncheck.toml) for the GO-2026-5932 suppression (openpgp transitive, not called).
---
<div align="center">
[🌐 AegisGate Security](https://aegisgatesecurity.io) · [✉️ support@aegisgatesecurity.io](mailto:support@aegisgatesecurity.io) · [🐦 X/Twitter](https://x.com/aegisgate) · [🐘 Mastodon](https://mastodon.social/@aegisgate)
Made with 🖤 by AegisGate Security developers to secure the AI attack surface.
</div>
