Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 29 Sept 2026

AEGIS

Ch 057.3of 22 Ransomware Protection Software
  1. 1Runs onAPI, Linux, Mac, self-hosted, Web, Windows
  2. 2CostsFree plan
  3. 3Rollback or recoveryYes
  4. 4Behavioral detectionYes
  5. 5Automatic isolationYes
  6. 6EDR includedYes
  7. 7Deploymenton premises
  8. 8Operating system coveragecross platform
8 lines stated Written from the maker's own pages: github.com, alejadxr.github.io
Visit site Alternatives
The AEGIS homepage

Overview

AEGIS is an open-source, self-hosted cybersecurity platform for detecting, analyzing, and responding to threats. Its listed detections include SQL injection, XSS, path traversal, command injection, brute force, port scans, credential theft, lateral movement, and C2 beacons. The project describes a five-layer detection pipeline and reports an 11/11 detection score, as well as 18-microsecond latency for its middleware layer. Deception options include SSH and HTTP honeypots, credential traps, and attacker interaction profiling. AI features can use OpenRouter, OpenAI, Anthropic, or Ollama; Sigma rules and playbooks can operate without an AI API key. The free plan is self-hosted with Docker Compose and supports up to 20 nodes, 100 assets, and 3 users. It is described for individuals, homelabs, and small teams, and is offered under the AGPL-3.0 license. Enterprise adds unlimited nodes, assets, and users, an SLA and dedicated support, plus a compliance dashboard covering ISO 27001, NIS2, and SOC 2 and SAML or OIDC single sign-on. Enterprise pricing is custom.

Who it is for

The free plan suits individuals, homelabs, and small teams prepared to self-host with Docker Compose. Enterprise is aimed at companies needing scale and advanced features.

What is good

  • Free open-source plan under AGPL-3.0.
  • Covers a broad list of threat types.
  • Sigma rules and playbooks work without an AI API key.
  • Deception tools include SSH and HTTP honeypots.
  • Enterprise includes compliance dashboard and SSO.

What to know first

  • Free plan is limited to 20 nodes.
  • Free plan is limited to 100 assets and 3 users.
  • Self-hosting requires Docker Compose.
  • Enterprise pricing is custom.

Verdict

AEGIS combines threat detection, response, and deception features in a self-hosted package. The free tier has stated node, asset, and user limits; enterprise pricing is custom.

AEGIS plans and pricing

All plans
Free · Open Source Free 20 nodes · 100 assets · 3 users alejadxr.github.io · 29 Sept 2026
Enterprise Not published Custom Unlimited nodes, assets, and users · SLA and dedicated support alejadxr.github.io · 29 Sept 2026

Compared on ransomware protection software

Free plan
Yesgithub.com
Rollback or recovery
Yesgithub.com
Behavioral detection
Yesgithub.com
Automatic isolation
Yesgithub.com
EDR included
Yesgithub.com
Deployment
on_premisesgithub.com
Operating system coverage
cross_platformgithub.com

Facts

Purpose
AEGIS is an open-source, self-hosted cybersecurity defense platform for detecting, analyzing, and responding to threats.alejadxr.github.io · 29 Sept 2026
Detection
The site describes a five-layer detection pipeline and reports an 11/11 detection score.alejadxr.github.io · 29 Sept 2026
Response speed
The site reports 18-microsecond detection latency for its middleware layer.alejadxr.github.io · 29 Sept 2026
Threat detection
Listed detections include SQL injection, XSS, path traversal, command injection, brute force, port scans, credential theft, lateral movement, and C2 beacons.alejadxr.github.io · 29 Sept 2026
Deception
AEGIS offers SSH and HTTP honeypots, breadcrumb credential traps, and attacker interaction profiling.alejadxr.github.io · 29 Sept 2026
AI and offline use
The site says AEGIS can use OpenRouter, OpenAI, Anthropic, or Ollama for AI features, while deterministic Sigma rules and playbooks work without an AI API key.alejadxr.github.io · 29 Sept 2026
Integrations
The site names OpenRouter, OpenAI, Anthropic, and Ollama as AI providers and describes shared threat intelligence.alejadxr.github.io · 29 Sept 2026
Self-hosting
The free plan is self-hosted with Docker Compose and the site instructs users to clone the repository and run docker compose.alejadxr.github.io · 29 Sept 2026
Platforms
The free plan includes a dashboard and Rust endpoint agent; the repository says the agent builds for macOS arm64, Linux x64, and Windows x64.github.com · 29 Sept 2026
Security and compliance
Enterprise includes a compliance dashboard for ISO 27001, NIS2, and SOC 2, plus SSO using SAML or OIDC.alejadxr.github.io · 29 Sept 2026
License
AEGIS is offered as open source under the AGPL-3.0 license.github.com · 29 Sept 2026
Free tier limits
The free plan is listed for up to 20 nodes, 100 assets, and 3 users.alejadxr.github.io · 29 Sept 2026
Intended users
The free plan is described for individuals, homelabs, and small teams; Enterprise is for companies seeking advanced features and scale.alejadxr.github.io · 29 Sept 2026
Enterprise support
The Enterprise plan lists an SLA and dedicated support.alejadxr.github.io · 29 Sept 2026

Best AEGIS alternatives

See all 20
All accessCh 01 AppCheck Free planFree trialLinux from $2.08/mo7.6 All accessCh 02 ManageEngine Ransomware Protection Plus Free planFree trialself-hosted from $0.58/mo7.6 All accessCh 03 Sangfor EasyConnect AndroidiOS 7.6 All accessCh 04 NeuShield Ransomware Protection Free planFree trialWeb from $2.08/mo7.5 All accessCh 06 Malwarebytes Ransomware Protection AndroidiOS 7.0 All accessCh 07 Rubrik Security Cloud APILinux 7.0

Where it ranks on Specifiction

Is AEGIS yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote AEGIS

Sources