Important
Open-weight LLMs are used to assist development of this tool. Those models are: GLM 5.3-flash, Qwen 3.8 and Kimi K3.
Are you tired of having 50+ different tools for scanning and linting? Well Argus is all of them combined and blazinly fast! 🦀⚡⚡
The crate is https://crates.io/crates/argus-scanner
cargo install argus-scannerargus scan . # this repo, all rulesets
argus github --org my-org # scan an org end to end
argus web https://example.com # web audit + client-js secrets
argus domain quad4.io # DNS, RDAP, certs, page
argus email argus@quad4.io # mail policy, keys, breach hook
argus ip 1.1.1.1 # geolocation, ASN, VPN, InternetDB
argus hash <sha256> # CIRCL hashlookup, optional MalwareBazaar
argus url https://quad4.io # fetch, redirects, WAF and challenge markers
argus ports 127.0.0.1 --ports 22 # TCP connect, modern ports first
argus system # Lynis-class host audit
argus scan . --osv --dep-check # + dependency advisories and hygiene
argus account github octocat # public profile, repos, stars, recent events
argus gharchive --org my-org # public event firehose, push SHAs, repo flips
argus typo quad4.io # live lookalike domains
argus socials https://example.com
argus feed https://blog.rust-lang.org/feed.xml
argus style a.txt b.txt # style distance, not an identification
argus stego . # appended payloads, with the text when it is readable
argus files --path /var/log # which processes have a path open
argus gitmeta . # names, emails, remotes
argus modules # built-in command list
argus grep --pick emails ./notes # stream a local file, no upload
argus extract notes.txt # capped sample of the same shapes
argus meta report.pdf # PDF, image, audio, and docx fields
argus media ./photos # C2PA, IPTC, generator tags
argus dork example.com # search links only
argus favicon https://example.com
argus user octocat
argus keybase chris # profile, proofs, device list
argus steam zed # public profile, counts, name history
argus bluesky jay.bsky.team # profile, counts, verification
argus mastodon Gargron@mastodon.social
argus reddit spez # archive karma, recent posts and comments
argus youtube @NASA # channel header, verification, uploads
argus tiktok @scout2015 # profile stats and flags
argus lemmy dessalines@lemmy.mlFindings carry severity, a stable rule id, evidence, and a fix hint.
Exit 1 when findings meet --fail-on, 0 otherwise, 2 on error.
Outputs: text, JSON, Markdown, SARIF, Code Climate, HTML.
Full documentation lives in docs/ and on the documentation site:
- Commands - every subcommand, what it does, examples
argus similarandscan --similarfind copied or vendored code by normalized-token winnowing fingerprints, robust to renames- Configuration - flags < env < TOML, tokens, offline, sandbox
- Output and CI - formats, baselines, VEX, CI wiring
- Rulesets - TOML rule format and the test corpus
- Architecture - module map, sandboxing, gates
- Releasing - tagged releases, signatures, immutability