Argus Sentinel — see what your AI agents are actually doing.

Claude Desktop, Codex, Cursor, ollama, custom MCP servers — every AI tool you run is a process making decisions on your behalf. Argus watches them, classifies them, and enforces rules so a prompt-injection or a runaway tool call can't quietly delete a file or leak a secret.

Install (one command)

curl -sSL https://eval.cognifinity.lu/install | sh

Docker required. macOS and Linux. No account, no signup, no telemetry on by default.

What happens next

1. The bundle (gateway, control plane, console, Cortex, Postgres, Redis) starts in Docker.
2. The console at http://localhost:3000 opens to a "Connect your laptop" card with the daemon-install snippet — copy + paste, one more curl.
3. Within ~30 seconds the AI Tools on this Device panel populates with every AI-API-talking process running on your machine. Detections (prompt injection, destructive shell, exfiltration URLs) light up the Detections page as they happen.

Free vs. paid

Free is single-host: full inspection pipeline (7 built-in rules + 16 starter packs covering credential exfil, shell safety, network exfil), full Console, full policy editor, all source. Paid is fleet management, managed SaaS, enterprise SSO, SIEM-vendor support, signed-under-NDA artifacts, SLA. Honest about what's still maturing in either tier.

Full walkthrough  ·  Free vs. paid  ·  Source on GitLab