Quickstart

1 Install & launch

Install is free. The trailing && argusred (macOS) launches it for the first time, which kicks off sign-up (step 2).

macOS

Linux

Windows is coming soon. On Linux, run argusred after install (step 3).

2 Sign up — 2M free tokens

The first run opens a quick Cosine sign-up in your browser — the same login that runs Cosine’s coding agent. New accounts start with 2M free tokens, enough to try a real scan. One account covers both products.

Sign-in is stored locally on your machine, so you won’t be asked again on the next run.

3 Run a scan

Change into a repo you own and run argusred. A setup screen lets you pick modules, the agent’s permissions, and optional exploit verification; the scan is read-only — it never modifies your code.

When it finishes, the report is written to a single markdown file in your repo:

Executive summary, per-module findings, location, severity, cause, and fix direction — for every finding it could ground in your code. The file stays on your machine.

Good to know

• Read-only is enforced below the model. A Go harness intercepts every tool call; file writes and command execution are deterministically blocked in scan mode.
• Exploit verification proves findings. Optionally turn it on to attempt a safe reproduction of each finding after the report — in an isolated Docker container or against your live FS. Off by default.
• Scans run as a parallel swarm. Time scales sub-linearly with codebase size — the setup screen shows a live estimate before you start.
• Pen Test is a separate, gated mode. It attempts exploits against systems you authorise. Access is by booking, with scope and authorisation written down first.