AEGIS audits scan coverage across the estate in navi.db — finding assets with stale last-seen dates, subnets with no scan history, and agent-managed hosts that haven't checked in within the expected window. It surfaces the blind spots before an adversary exploits them.
Capabilities
- Queries navi.db for assets with last-seen dates outside the expected scan cadence
- Identifies subnets and asset groups with below-threshold scan coverage
- Flags agent-managed hosts that haven't checked in within configurable windows
- Gated coverage report — proposed, previewed, sent only on confirm
What AEGIS Audits
AEGIS reads the last-seen and scan-source data already in navi.db and finds the gaps — the subnet that hasn't been scanned in 90 days, the agent-managed host that stopped checking in after a reimage, the asset group where 30% of hosts have no recent finding.
Why It Matters
A finding you can't see is a risk you can't manage. AEGIS ensures your scan coverage is as complete as you believe it is — working entirely from navi.db, with a human gate before any coverage tag or alert is written.
Gate Model
Every coverage report is proposed and previewed before delivery. AEGIS requires explicit per-call confirmation. Works entirely from navi.db — no external feeds.