Skip to main content
All projects
project-aegis·2025 — Present·NDA

Project AEGIS

Modular SIEM for air-gapped and connected deployments.

AArchitecture
SIEMMESH
Correlator
Collectors
Verified Store
Sync
Rust·Elasticsearch·Kafka·Kubernetes·gRPC·MISP
BContext

SIEM products skew either cloud-only or monolithic on-prem. Neither shape fits operations that move between connected, partially-connected, and fully air-gapped environments while requiring forensic integrity.

CApproach

Pluggable collectors feed a correlation engine writing to a cryptographically verified store. Nodes operate independently and reconcile when connectivity returns. Modules deploy selectively per environment.

DConstraints
  • 01Runs air-gapped at the edge
  • 02Chain-of-custody on storage
  • 03Modular deploy per capability tier
EStatus
  • POC phase. Architecture available under NDA.