We Open-Sourced Both Halves of Our Security Stack — Detection and Deliberation
AEGIS catches the threat. ENLIL decides what it means. Both are free, and we want to know if they actually help you.
We've written before about each of these projects separately — AEGIS's post-quantum forensic logging and why ENLIL runs 9 LLMs in parallel instead of one. This post is about why they're actually one system, and why we're not gatekeeping either half of it.
Two different jobs
AEGIS is an intrusion detection/prevention system. It watches traffic, correlates signals across nine layers (from crypto-level filtering to adaptive moving-target defense), and decides — fast, locally, without calling out to anything — whether something is an attack. It's deliberately narrow: detection and containment, nothing else. No counterattacks, no active reconnaissance, one process, deployable on a standard VPS.
