🛡️ AegisGate Security Platform™ — Secure Every AI Interaction

🚀 Try the Live Demo

The only AI security gateway with six pillars of AI security (HTTP API, MCP, A2A, ACP, RESPONSE, Trust Framework), MITRE ATLAS enforcement, the EU AI Act Compliance Module, and zero external dependencies. Deploy in 60 seconds.

🧠 NEW in v4.0.0: ML Threat Detection — Char CNN-BiLSTM neural network (1.58M params, 6.2MB ONNX) achieves 100/100 evasion resistance with 0% false positive rate and ~5ms inference latency. Supplementary layer that catches what regex misses. v4.0.0 release notes →

🔒 v4.0.0: ML Threat Detection · 100/100 evasion resistance · 0% FPR · ~5ms latency · 27 compliance frameworks · 23,578 RPS · 11,983 tests, 0 failures

🌐 HTTP API Security

153+ detection patterns
MITRE ATLAS 66 techniques
PII, secrets, API key detection
Bidirectional request/response scanning

🔗 MCP Protocol Protection

Session authentication + isolation
8 guardrails active
MITRE ATLAS enforcement
Tool authorization with risk matrix

🤝 A2A Agent-to-Agent Security

mTLS + HMAC-SHA256 integrity
Capability enforcement per agent
License-aware enforcement
Rate limiting and audit logging

🛡️ Agent Response Security

PII, secrets, hallucination, toxicity detection
Fail-closed by default
Redaction with multiple strategies
Compliance reports (GDPR, HIPAA, PCI, SOC 2)

🔐 Trust Framework

Per-session trust score accumulator
Ed25519-signed attestations on every event
Cross-pillar correlation (MCP, A2A, Proxy, Response)
Professional+ tier feature

🛡️ AegisGate Lens FREE

Free, privacy-first Chrome extension
4-facet detection (PII, secrets, XSS, compliance)
8 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok
734 automated tests, zero external dependencies

⚡ gRPC Service Layer v3.5.0

7 services: Compliance, Scanner, Trust, SSO, Audit, Analytics, Health
50 RPC methods with server reflection
gRPC health checking (grpc.health.v1)
TLS support with mutual TLS

🔐 Trust Attestation v3.5.0

ECDSA P-256 attestations with RFC 3161 TSA timestamping
Per-session trust score accumulator
Cross-pillar correlation (MCP, A2A, Proxy, Response)
Attestation verification CLI: aegisgate attestation verify

📡 SIEM Integration v3.6.2

11/11 SIEM platform coverage (Splunk, Elasticsearch, QRadar, Sentinel, SumoLogic, LogRhythm, ArcSight, Syslog, Datadog, CloudWatch, SecurityHub)
JSON-lines persistence with replay on startup
Batch event forwarding with retry logic
CEF, LEEF, JSON, Syslog RFC 5424, CSV formats

🧠 ML Threat Detection NEW v4.0.0

Char CNN-BiLSTM neural network (1.58M params, 6.2MB ONNX)
100/100 evasion resistance, 0% false positive rate
~6ms inference latency — supplementary layer, never overrides regex
Adversarial robustness testing (PGD + FGSM), drift monitoring (PSI + KL)

🚀 Live Demo

Try AegisGate in action with our interactive demo environment

No account required
Instant access
Full feature set

🚀 Launch Demo →

📦 Download v4.0.0

Deploy the latest release in your infrastructure

Single binary: 34.7 MB
Docker: ghcr.io/aegisgatesecurity
Apache 2.0 licensed

Download →

⭐ Star on GitHub

Join our growing community of security engineers

100+ contributors
Active development
Enterprise support available

Star Project →

Why AegisGate?

There are other AI security products. Here’s how AegisGate compares on the dimensions that matter to enterprise security teams:

Capability	AegisGate	Lakera Guard	NeMo Guardrails	Rebuff	Protect AI
Deployment model	Self-hosted binary	SaaS API only	Library	Library	Platform
HTTP proxy scanning	✅	✅	❌	❌	⚠️
MCP protocol protection	✅	❌	❌	❌	❌
A2A protocol protection	✅	❌	❌	❌	❌
ACP protocol protection	✅	❌	❌	❌	❌
Response scanning	✅	✅	✅	✅	✅
Trust Framework	✅ Ed25519	❌	❌	❌	⚠️
MITRE ATLAS	✅ 66 techniques	⚠️ Partial	❌	⚠️ Partial	✅
OWASP LLM Top 10	✅ 49 patterns	✅	✅	✅	✅
EU AI Act	✅ 82 controls	❌	❌	❌	❌
Multi-framework	✅ 27 frameworks	❌	❌	❌	⚠️
Tamper-evident logs	✅ Hash chain	❌	❌	❌	⚠️
Open source	✅ Apache 2.0	❌	✅ Apache 2.0	✅ MIT	❌
Air-gap deployable	✅ Single binary	❌	✅ Library	✅ Library	❌
Hardware footprint	34.7 MB, <256MB RAM	n/a	In-process	In-process	n/a

TL;DR: If you need protocol-level security (MCP, A2A, ACP) + compliance evidence + self-hosting, AegisGate is the only option that covers all three.

Library-style tools (NeMo Guardrails, Rebuff) are great for in-app alignment but don't protect your network boundary
SaaS tools (Lakera) require sending your traffic to a third party
Compliance-focused tools (Protect AI) are platforms, not gateways, and don't include protocol coverage

Attack Surface Coverage

Your AI infrastructure spans multiple attack surfaces. Most security tools only cover one or two. AegisGate covers all six:

Attack Surface	Risk	Traditional WAFs	LLM Alignment Tools	AegisGate
HTTP APIs	Prompt injection, data leakage	⚠️ AI-agnostic	❌ No	✅ AI-aware, 153+ patterns
MCP Protocol	Tool poisoning, session hijacking	❌ No protection	❌ No	✅ Built-in guard, 8 guardrails
A2A Communication	Agent impersonation, tampering	❌ No protection	❌ No	✅ mTLS, HMAC, capability
Agent Response	PII leakage, hallucination	❌ No protection	⚠️ Some	✅ Real-time guard, 5 detectors
ACP Protocol	Message tampering, replay	❌ No protection	❌ No	✅ HMAC-signed messages
Trust / Audit	No traceability	❌ No protection	❌ No	✅ Ed25519 attestations

AegisGate secures all six in a single 34.7 MB binary you deploy in 60 seconds.

Six Pillars in Detail

🌐 HTTP Proxy Security

Bidirectional scanning of every API request and response. 153+ patterns detect secrets, PII, and threats before they reach your AI services.

🔗 MCP Protocol Protection

Session authentication, tool authorization, and 8 guardrails protect your AI agents from supply chain attacks and unauthorized tool execution.

🤝 A2A Agent-to-Agent Security

Zero-trust guardrails for inter-agent communication. mTLS authentication, HMAC integrity, capability enforcement, and license-aware rate limiting.

🔐 ACP Protocol Security

HMAC-signed messages, per-session rate limiting, and response scanning protect agent communication from tampering and replay attacks.

🛡️ Agent Response Security

Real-time scanning of LLM outputs for PII, secrets, hallucination, and toxicity. Fail-closed security protects sensitive data.

⚡ Rate Limiting & Throttling

Protect your AI infrastructure from abuse with intelligent rate limiting. Per-client, per-IP, and per-model quotas prevent DoS attacks and manage costs.

🔍 Threat Intelligence

Real-time threat detection with pattern matching across 153+ signatures. Blocks prompt injection, sensitive data exfiltration, and adversarial attacks.

📊 Full Observability

Every AI request, response, tool call, and session is logged. SIEM-ready with structured JSON output and compliance reports.

EU AI Act Compliance

World's first comprehensive AI regulation compliance module — 82 controls across 8 categories, automated at no extra cost

9 automatic controls: Input validation, data quality, log retention
73 manual controls: Checklists, evidence templates, audit reports
API endpoints: `/api/v1/compliance/scan?framework=eu-ai-act`
Tier: Included with Professional+ at no extra cost

Learn More →

EU AI Act Compliance Module — Included with Professional+ tier

The EU AI Act (Regulation 2024/1689) is the world’s first comprehensive AI regulation. AegisGate’s EU AI Act Compliance Module gives you a single source of truth for whether your AI system is compliant — across 82 controls in 8 categories.

📊

🎯

Who needs it

AI providers placing high-risk AI systems (Annex III) on the EU market after August 2026
Deployers of AI in employment, education, law enforcement, critical infrastructure
GPAI model providers with > 10²⁵ FLOPs of training compute
EU + non-EU companies placing AI on the EU market

⚙️

How it works

9 automatic controls — AegisGate enforces these in-line (input validation, data quality, log retention, etc.)
73 manual controls — AegisGate provides checklists, evidence templates, audit-ready reports
Compliance scan endpoint: GET /api/v1/compliance/scan?framework=eu-ai-act returns coverage %, missing modules, remediation steps
Full audit report: GET /api/v1/compliance/report?framework=eu-ai-act returns all 82 controls with status

💼

Tier & pricing

Tier gate: Professional+ (Professional and Enterprise)
Pricing: Included with Professional and Enterprise at no extra cost
BAA + DPA: standard agreements cover EU AI Act data flows (see /legal/)
Read the customer 1-pager: EU AI Act overview

EU AI Act Module — Full Details

Beta status: This module is fully implemented and tested since v3.5.0. Counsel review of the legal interpretation is pending (v3.4.0+). Use for evaluation and pre-audit work; defer formal conformity assessment until counsel sign-off is complete.

Compliance Frameworks

Choose the coverage that matches your compliance needs.

Framework	Community	Developer	Professional	Enterprise
MITRE ATLAS	✓	✓	✓	✓
NIST AI RMF	✓	✓	✓	✓
OWASP LLM Top 10	✓	✓	✓	✓
GDPR	—	✓	✓	✓
HIPAA	—	✓	✓	✓
PCI-DSS	—	✓	✓	✓
SOC2	—	Module	✓	✓
ISO 27001	—	—	✓	✓
ISO 42001 (AI)	—	—	✓	✓
EU AI Act	—	—	✓ Included	✓ Included
FedRAMP Moderate	—	—	151/170	170/170
CMMC Level 2	—	—	—	✓
NIST 800-171	—	—	—	✓
HITRUST CSF	—	—	—	✓
TISAX	—	—	—	✓
CCPA	—	—	—	✓

Developer tier adds full compliance (HIPAA + PCI-DSS) and mTLS. Professional includes everything plus ISO 27001, ISO 42001, CMMC L2, FedRAMP Moderate (151/170), the EU AI Act Module at no extra cost, and the Trust Framework. Enterprise adds custom frameworks, FedRAMP Moderate (full 170/170), and dedicated support.

📋 Compliance Posture: AegisGate publishes self-assessments against HIPAA, NIST CSF 2.0, SOC 2 Type 1, CIS Controls v8 IG1, and the EU AI Act. 📋 View all compliance documentation

Quick Start

# Pull and run
docker run -d \
  -p 8080:8080 \
  -p 8081:8081 \
  -p 8443:8443 \
  ghcr.io/aegisgatesecurity/aegisgate-platform:v4.0.0

# Verify deployment
curl http://localhost:8443/health

By the Numbers

Metric	Value	Details
Detection Patterns	153+	Comprehensive threat signatures
MITRE ATLAS Techniques	66	Full adversarial coverage
EU AI Act Controls	82	8 categories automated
Sustained RPS	23,578	v4.0.0 benchmark
Proxy Overhead p99	-2.8ms	Zero-cost (faster than direct)
Security Pillars	6	HTTP, MCP, A2A, ACP, RESPONSE, Trust
Compliance Frameworks	24	Global regulatory coverage
Test Coverage	86.1%	Comprehensive validation
Tests Passing	11,200+	CI/CD verified
Binary Size	34.7 MB	Single static binary

Enterprise Security Features

🔐 Cryptographic Identity

ECDSA P-256 agent identity and verification. Challenge-response authentication with key rotation support.

🛡️ Fail-Secure Design

Insecure fallback replaced with fail-closed behavior. All security checks are fail-closed by default.

📋 STRIDE Threat Model

Comprehensive threat analysis covering spoofing, tampering, repudiation, information disclosure, DoS, and elevation of privilege.

🔄 Cross-Protocol Correlation

Correlate threats across HTTP, MCP, A2A, ACP, and ANP protocols with real-time pattern matching.

🛡️ AegisGate Security Platform™ — Secure Every AI Interaction

🌐 HTTP API Security

🔗 MCP Protocol Protection

🤝 A2A Agent-to-Agent Security

🛡️ Agent Response Security

🔐 Trust Framework

🛡️ AegisGate Lens FREE

⚡ gRPC Service Layer v3.5.0

🔐 Trust Attestation v3.5.0

📡 SIEM Integration v3.6.2

🧠 ML Threat Detection NEW v4.0.0

🚀 Live Demo

📦 Download v4.0.0

⭐ Star on GitHub

Why AegisGate?

Attack Surface Coverage

Six Pillars in Detail

🌐 HTTP Proxy Security

🔗 MCP Protocol Protection

🤝 A2A Agent-to-Agent Security

🔐 ACP Protocol Security

🛡️ Agent Response Security

⚡ Rate Limiting & Throttling

🔍 Threat Intelligence

📊 Full Observability

EU AI Act Compliance

EU AI Act Compliance Module — Included with Professional+ tier

82 controls, 8 categories

Who needs it

How it works

Tier & pricing

Compliance Frameworks

Quick Start

By the Numbers

Enterprise Security Features

🔐 Cryptographic Identity

🛡️ Fail-Secure Design

📋 STRIDE Threat Model

🔄 Cross-Protocol Correlation