Argus Systems: heterogeneous multi-agent product security
Argus closes the loop from unknown vulnerability to shipped fix. It is neither a scanner nor a language model left to guess. It is a different kind of system: a deterministic spine of program analysis, on which a heterogeneous set of agents reasons. The spine builds a queryable model of the product, computes data flow and reachability, and holds the ground truth; the agents propose hypotheses, chase variants, generate proofs and write repairs against it. Probabilistic where judgement is needed, deterministic where proof is required.
The agents are not copies of one generalist. Each is built for a distinct task, with its own tooling and reasoning strategy, and an orchestration layer schedules, parallelises and cross-checks their work across the whole product. Argus operates on source in any language, on compiled binaries and firmware with no source at all, and on device configuration. One sweep covers every relevant weakness class in a single pass: a sweeper, not a hunter chasing one lead.
The agents:
- Teacher
- Builds and continuously updates a threat model of your specific product, so every other agent reasons about your attack surface rather than a generic checklist.
- Vulnerability Researcher
- Finds unknown vulnerabilities across all CWE classes and exposed secrets, in source and in binaries, with source-to-sink evidence for every finding.
- Variant Hunter
- Given one confirmed bug, closes the entire class across the codebase. You fix the pattern, not the instance.
- PoC Generator
- Produces a working, reproducible proof of concept for each finding. If it cannot be triggered, it is not reported.
- Automated Program Repair
- APR generates fixes automatically, without human intervention, then tests each patch rigorously against the PoC and your existing behaviour before it reaches a reviewer.
Findings arrive as a verified exploit, a root cause, a class-wide fix and a test, in a form your engineers can merge. Delivered via CI/CD, a console, or connectors to the platforms you already use.
