The Self-Hosted Security Gateway for the Modern Enterprise

ARGUS is a next-generation, self-hosted Application Security Gateway that combines Reverse Proxy, Load Balancing, Web Application Firewall (WAF), Bot Protection, GeoIP Security, SSL Automation, and Real-Time Monitoring into a single unified platform.

While Nginx Proxy Manager provides basic reverse proxy functionality, ARGUS is a complete security platform with WAF, bot protection, GeoIP security, load balancing, rate limiting, Fail2Ban integration, post-quantum TLS, and a real-time security dashboard.

Yes. ARGUS runs entirely on your own infrastructure. There are no cloud dependencies, no external APIs required for core functionality, and no data leaves your network unless you configure it to.

ARGUS uses ModSecurity v3, the industry-standard open-source WAF engine, integrated with OWASP Core Rule Set (CRS) 4.26. This provides comprehensive protection against SQL injection, XSS, CSRF, and hundreds of other attack vectors.

Post-Quantum TLS uses cryptographic algorithms resistant to attacks from quantum computers. ARGUS implements hybrid ML-KEM support, ensuring your encrypted traffic remains secure even when quantum computers become capable of breaking current encryption standards.

Yes. ARGUS has full support for HTTP/3 and QUIC protocols, providing faster connection establishment, improved performance on lossy networks, and better security through mandatory encryption.

ARGUS integrates with Let's Encrypt for automated SSL certificate issuance and renewal. It supports wildcard certificates, DNS-01 challenges, and automatic renewal before expiration. You can also import your own certificates.

Recommended minimum: 2 CPU cores, 4GB RAM, 20GB storage, and a 64-bit Linux distribution (Ubuntu 22.04+, Debian 12+, or Alpine Linux). For production environments with high traffic, we recommend 4+ CPU cores, 8GB+ RAM, and SSD storage.

ARGUS uses a comprehensive GeoIP database to identify the geographic origin of incoming requests. You can create country allowlists, blocklists, or challenge mode. The interactive world map shows real-time traffic and attack sources by country.

ARGUS offers a community edition with core features available for free, including reverse proxy, basic WAF, SSL automation, and monitoring. The professional edition includes advanced features like post-quantum TLS, advanced analytics, and multi-tenancy.

ARGUS integrates directly with Fail2Ban to automatically ban IP addresses that exhibit malicious behavior. When the WAF or rate limiting detects repeated attacks, ARGUS automatically creates a Fail2Ban jail to block that IP at the firewall level.

ARGUS supports JWT for API access, TOTP for two-factor authentication, API tokens for programmatic access, and traditional username/password authentication. Role-based access control allows granular permissions for different users.

Community support is available through our GitHub repository, documentation, and community forums. Professional edition customers receive priority email support with SLA-backed response times. Enterprise customers get dedicated support engineers.

Yes. ARGUS is built on nginx and optimized for high-performance traffic handling. It can process tens of thousands of requests per second on modest hardware. The upcoming high availability clustering will provide active-active redundancy for 99.999% uptime.

Absolutely. ARGUS supports any backend service that accepts HTTP/HTTPS traffic, including web servers, APIs, databases with HTTP interfaces, and containerized applications. Deploy as a gateway in front of your existing services without changes.