Modern capture surface
Inspect encrypted and plaintext application traffic across browser, service, and command-line workflows.
SSL/TLS-capable cybersecurity proxy
ARGUS is an interactive cybersecurity proxy for inspecting, capturing, replaying, and modifying HTTP/1, HTTP/2, WebSocket, TCP, UDP, and DNS traffic. It keeps the mature proxy engine and workflows developers expect while presenting a clean, modern interface for day-to-day traffic analysis.
ARGUS gives security engineers, developers, and testers the sharp tools they need without burying core workflows under noise.
Inspect encrypted and plaintext application traffic across browser, service, and command-line workflows.
Capture once, investigate deeply, modify requests, and replay flows through the interface or command-line tooling.
Compatibility entry points remain available so existing scripts and operational workflows can continue using familiar commands.
Production package
The download button points to the official GitHub release archive.
After downloading argus.tar.gz, unpack it and run the
commands below for your operating system.
Unzip the package, enter the project folder, sync dependencies with
uv, then launch the interface you need.
tar -xzf argus.tar.gz
cd argus
uv sync
uv run argus --version
uv run argusweb
tar -xzf argus.tar.gz
cd argus
uv sync
uv run argus --version
uv run argusweb
tar -xzf argus.tar.gz
cd argus
uv sync
uv run argus --version
uv run argusweb
python -m tarfile -e argus.tar.gz
cd argus
uv sync
uv run argus --version
uv run argusweb
uv run argusdump -w flows.argus
argus # interactive console interface
argusweb # browser-based capture interface
argusdump # command-line capture and replay
uv run pytest
cd web
npm install
npm run ci-build-release
Why ARGUS
ARGUS takes its name from Argus Panoptes, the many-eyed watcher from Greek mythology. The reference fits a proxy built to observe traffic from every angle: requests, responses, frames, streams, DNS lookups, raw packets, replay paths, and the small details that reveal what a system is really doing.
The name is a reminder of the product's job: keep watch with precision, make hidden network behavior visible, and give engineers a calm command center for deciding what to inspect, modify, replay, or preserve.