Plain questions, direct answers
Is anything monitoring me? Is anything hiding from the process list? What starts on its own? Each audit answers one question.
我的机器还属于我吗？
Argus
守护你的工作所依赖的机器。
智能体和服务器带着你的凭据运行代码。Argus 盯着它们所在的机器：什么在运行、什么可能夺取或保持控制、什么被悄悄改动。它在本地工作，保留证据，并告诉你它看不到什么。一个版本面向 Windows 电脑，一个面向 Linux 服务器。
如何运作
01
Observe
Processes, autostarts, accounts, network activity, sensors and firewall state, on a Windows PC or a Linux server.
02
Correlate
Events are joined into a timeline so a change has a before and an after.
03
Explain
Findings come with the evidence behind them and with what could not be seen.
04
Respond
Reversible containment only when you have switched it on. Anything more waits for you.
它做什么
本地安全守护
The developer's trust surface
It shows what runs because you opened an editor, a repository or a shell, which is exactly where an agent works.
Evidence first
What is observed is recorded before anything responds to it. Something that is merely absent from a later scan is logged as not observed, never as fixed.
A response ladder
Watch, ask, propose, act. Automatic actions are limited to reversible containment, every action is in a ledger, and there is an undo.
Threat intelligence that can only add suspicion
Public threat feeds are vetted by a deliberately simple checker. Nothing fetched is ever executed, and intelligence can never clear a finding.
It names its own blind spots
Argus compares current attacker techniques with what its own sensors cover and reports the gaps as a work list.
An edition for servers
On Linux, Argus runs as its own unprivileged account with read-only capabilities. It audits SSH keys and configuration, sudo rules, systemd units, cron, password-guessing in the auth log, web shells in document roots, container exposure and kernel-level hiding.
Local by construction
The dashboard only listens on your own machine. There is no telemetry by default, and the core depends on almost nothing but the language it is written in.
示意
价格
免费运行，为审查付费。
服务器版
免费
在你的 Linux 服务器上观察、记录证据并发出警报。防护功能从不依赖许可证。
服务器审查
$149 每台服务器，一次
观察一周后生成报告：这一周发生了什么，以及 Argus 看不到什么。许可证密钥解锁完整报告。14 天内可退款。
Argus Watch
$9 每台服务器，每月
审查之后的每周报告与变更提醒。随时可取消。
桌面版（ARGUS-INSTINCT）
免费测试版 之后每年 $79
适用于 Windows + WSL2 电脑。测试期间免费；付费计划开放后，任何功能都不会停止工作。
付款由记录商户 Polar 处理：由它收款、计税并开具发票。Argus 从不接触你的银行卡。此审查不是安全审计、渗透测试或认证。
下载 · 2026.10.30-2
两个版本，同一种审视方式。
Linux 服务器
x86-64 Linux，需 systemd 和 glibc 2.28 或更新版本（Ubuntu 20.04+、Debian 10+、RHEL/Alma/Rocky 8+）。单个原生程序，无需 Python；以独立的非特权账户运行。
curl -fsSLO https://www.archymedes.xyz/downloads/argus/argus-server-linux-x86_64.tar.gz
tar -xzf argus-server-linux-x86_64.tar.gz
sudo ./argus-server/install.sh在 Debian 和 Ubuntu 上，也可以使用同一程序的软件包：
curl -fsSLO https://www.archymedes.xyz/downloads/argus/argus-server_2026.10.30.2_amd64.deb
sudo apt install ./argus-server_2026.10.30.2_amd64.deb仪表盘只监听服务器的回环地址。通过 SSH 或下方的桌面应用访问。
然后运行 argus investigate，获取第一份完整报告。
Windows 电脑
在 Windows 本机上运行 Argus。
Windows 版本正在重建为原生程序，本次发布未包含。要从 Windows 电脑监看 Linux 服务器，请使用下方的桌面应用。
桌面应用
为你运行的 Argus 服务器提供窗口、托盘图标和通知。它本身不监看任何内容：通过 SSH 隧道显示服务器的仪表盘。支持 Linux（WebKitGTK）和 Windows 10/11。
- 安装。Windows：.exe 无需安装程序；放在你自己的文件夹中并打开一次，它会把 ARGUS-1 添加到开始菜单。Linux：在下载所在的文件夹中运行：
sudo apt install ./argus-desktop_2026.10.30.2_amd64.deb - 在服务器上为应用生成专用令牌（只显示一次）：
argus desktop pair --name desktop - 将该令牌单独一行保存为 client.token，位置为 %APPDATA%\local.jarvis.desktop（Windows）或 ~/.config/local.jarvis.desktop（Linux，之后执行 chmod 600）。
- 使用应用时保持此隧道开启，然后打开 ARGUS-1：
ssh -N -L 8787:127.0.0.1:8787 your-server
Windows 应用尚未进行代码签名。如果 Windows 显示“Windows 已保护你的电脑”，请选择“更多信息”，确认应用为 argus-desktop-windows-x64.exe，然后选择“仍要运行”。如果没有“仍要运行”按钮，说明此电脑的策略会阻止未签名程序：不要为 Argus 关闭这项保护。
应用只连接 127.0.0.1；仪表盘从不暴露到网络。撤销应用：argus desktop revoke ID（argus desktop clients 列出 ID）。
SHA256SUMS · SHA256SUMS.sig · allowed_signers · 校验下载 · 文档
实际使用
Ask it a question
argus spy- Is anything monitoring me? Who used the microphone or camera?
argus hidden- Is anything hiding from the normal process list?
argus toolchain- What runs because I opened an editor, a repo or a shell?
argus secrets- Which credentials are sitting in plain text on this disk?
argus evasion- Is anything in a position to lie to these checks?
argus gaps- What attacker tradecraft do I not cover yet?
它不是什么
- Not a replacement for enterprise endpoint security.
- Windows 10 and 11 (64-bit), and Linux servers with systemd. No macOS edition yet.
- Someone with full administrator or kernel control can falsify what any local tool sees. Argus says so instead of hiding it.