TMAegis
en

Features

Everything TMAegis does, and the engineering choices that keep production safe.

Scan and detect

Auto-detection finds the operating system and installed software, then selects only the rules that apply.

  • Operating system and installed software detection with --auto-detect
  • Profile levels 1 and 2, and manual-review items listed with instructions
  • Concurrent audits with a read-only guarantee

Reversible remediation

Changes are designed to be undone.

  • Automatic snapshots with a Time Machine style list of restore points
  • Syntax verification before a changed configuration goes live
  • Dead-man's switch with automatic rollback

Declarative rules

Policies are data, not code buried in a binary.

  • YAML rules with audit, remediation and reference
  • Target and operating system family matching
  • Rules are open to review, so you can audit the auditor

Cloud and infrastructure

Agentless checks that respect your infrastructure as code.

  • AWS, Azure, Google Cloud, Oracle, Alibaba and IBM Cloud checks
  • Microsoft 365 and Google Workspace checks
  • Terraform proposals instead of direct changes, so no state drift

Network devices

Audit exported configurations without touching the device.

  • Cisco, Juniper, Palo Alto, Fortinet, F5, Check Point and more
  • Point at a saved running configuration with --device-config
  • Nothing connects to the device

Private AI

AI is optional and only estimates the impact of a fix.

  • Local models through Ollama, fully offline
  • Bring your own key for Claude, OpenAI or Gemini
  • Secrets, tokens and addresses are redacted before any request

Reports

One scan, the right format for each audience.

  • HTML, PDF and Excel for auditors and managers
  • SARIF for the GitHub Security tab, ASFF for AWS Security Hub
  • JSON, JSON Lines and CSV for pipelines and SIEMs

Plugins and integrations

Notify, ticket and extend.

  • Slack, Telegram, Jira and webhook plugins included
  • Executables or sandboxed WebAssembly with SHA-256 pinning
  • A self-hosted dashboard to collect results from many hosts

Your language

The command line, desktop app, reports and this website speak 16 locales.

  • Includes Vietnamese, Chinese, Japanese, Korean, Russian and Serbian in both scripts
  • Language follows your operating system, or choose it with --lang
  • Rule text stays in English so it matches the benchmark you cite