Experience ARGUS in your browser:
Explore the SOC Dashboard, Alert Investigation, and Cases & DFIR workspace through the interactive frontend prototype. ARGUS is a modern investigation platform designed for Security Operations Center (SOC) and Digital Forensics & Incident Response (DFIR) teams.
Security investigations are often spread across multiple tools—SIEM dashboards, threat intelligence platforms, case management systems, forensic tools, spreadsheets, and documentation. Switching between these tools slows investigations and causes valuable context to be lost. ARGUS brings the investigation workflow into a single workspace by combining security monitoring, alert triage, incident management, and AI-assisted investigation experiences through a unified interface.
Current Release: v1.0 Alpha This release focuses on validating the investigation workflow, user experience, and application architecture. Backend services, live integrations, and AI orchestration are planned for future releases.
Modern security teams spend a significant amount of time collecting context before they can make decisions. ARGUS is built around a simple idea:
Spend less time switching tools and more time understanding incidents.
Instead of treating alerts, investigations, and cases as separate systems, ARGUS presents them as parts of a single investigation workflow.
A real-time command center providing:
- Security posture overview
- Live threat metrics
- Interactive attack map
- Alert activity
- MITRE ATT&CK coverage
- AI agent monitoring
- Telemetry widgets
A complete alert triage workspace with:
- Search and filtering
- Severity-based prioritization
- Bulk operations
- Alert investigation drawer
- AI-assisted triage summary
- Analyst-focused workflow
Incident management workspace featuring:
- Case lifecycle management
- Kanban board
- Timeline view
- Evidence tracking
- Response history
- Investigation details
- Enterprise navigation
- Global command palette
- Copilot dock
- Responsive layout
- Accessible components
- Shared design system
- Smooth page transitions
- Next.js 16 (App Router + Turbopack)
- React 19
- TypeScript
- Tailwind CSS v4
- Framer Motion – Smooth animations & transitions
- Lucide React – Icon system
- CMDK – Command palette
- TanStack React Table – Alert management tables
- Zustand
- D3.js
- React Flow
- date-fns
- clsx
- tailwind-merge
- class-variance-authority
- Vitest
- ESLint
src/
├── app/
├── components/
│ ├── dashboard/
│ ├── alerts/
│ ├── cases/
│ ├── shell/
│ └── ui/
├── lib/
└── docs/
The application follows a modular architecture where every feature is isolated into reusable UI components, shared utilities, and domain-specific formatting logic.
The current release includes the operational foundation of ARGUS.
Upcoming modules include:
- Threat Hunting
- Threat Intelligence
- IOC Investigation
- MITRE ATT&CK Explorer
- Attack Graph
- AI Investigation Copilot
- Security Knowledge Graph
- Security Twin
- Evidence Locker
- Executive Reporting
- Asset Inventory
- Identity Security
- Cloud Security
- Endpoint Security
- Compliance Workspace
- Plugin Framework
ARGUS is being developed as a Security Investigation Operating System rather than another SIEM.
The long-term goal is to provide a unified investigation experience where alerts, evidence, threat intelligence, analyst knowledge, and AI-assisted reasoning work together to reduce investigation time and improve security decision-making.
| Module | Status |
|---|---|
| Landing | ✅ Complete |
| Dashboard | ✅ Complete |
| Alerts | ✅ Complete |
| Cases & DFIR | ✅ Complete |
| Design System | ✅ Complete |
| Testing | ✅ Complete |
| Documentation | ✅ Complete |
| Remaining Modules | 🚧 Planned |
This project is currently released for demonstration and educational purposes. Licensing may change as the platform evolves.