What Aegis Terminal is, what each agent does, and how to use it responsibly.
Aegis Terminal is an AI-assisted security investigation platform. Instead of manually checking multiple separate tools, you can submit an indicator, an IP address, a URL, a phone number, or a log file, and get back a synthesized, plain-English risk assessment generated from real data.
The platform is organized into seven specialized agents, each described below, plus the general-purpose AEGIS Copilot for free-form questions.
Ask questions in plain English about IPs, domains, indicators, or general security topics. Supports PDF report uploads for extraction and analysis, and remembers context within a session for multi-turn investigations.
How to use: Type a question or paste an indicator into the chat box.
Submit a file hash, IP address, domain, or URL and receive a synthesized verdict drawn from multiple malware, host, and abuse-reputation databases.
Check whether a password or email address has appeared in a known data breach.
You can check either field independently, or both together.
Submit any URL and Aegis visits it inside an isolated browser environment, capturing a live screenshot and analyzing what the page loads, connects to, and does, without you needing to open the link yourself. Takes roughly 15–30 seconds per scan.
Check any IP address for VPN, proxy, or Tor exit-node usage, along with a fraud score and true ownership details (ISP, organization, network range).
Accepts: IPv4 addresses.
Validate a phone number for carrier, line type (mobile, landline, VOIP), validity, and fraud risk, with reverse owner-name lookup where available. Owner-name coverage is strongest for US and Canadian numbers and depends on the carrier's public caller-ID records; many numbers will correctly return "not available" rather than a name.
Accepts: phone numbers including country code (e.g., 1 followed by a 10-digit US number). A bare 10-digit US number is automatically corrected to include the country code.
Upload a log file from any environment, Windows Event Logs, firewall logs, syslog, or Splunk exports, and the AI identifies anomalies, suspicious patterns, and attack indicators, explained in plain English.
Each agent has a daily usage limit on the Free plan; Pro and Enterprise plans include unlimited usage across all agents. Current limits are listed on our Pricing page.
All agents rely on third-party data sources that may be incomplete, delayed, or occasionally incorrect. AI-generated summaries are a best-effort synthesis of that data and can occasionally misstate details. Aegis Terminal is a research and investigation aid, not a certified security determination, legal advice, or a substitute for professional judgment.
Questions about how to use a specific agent, or issues with a result, can be sent to contact@cyberdefenseautomations.com.