Permission management
that actually scales.

Octal mode uses numeric notation (e.g., 755, 644) to set exact permission states in a single declaration. Symbolic mode uses human-readable operators (e.g., u+x, g-w, o=r) to add, remove, or set specific permissions relative to the current state. Both are production-grade — octal is favoured for deterministic deployments, symbolic for incremental adjustments.

Aegis is SOC 2 Type II certified, ISO 27001 compliant, and GDPR-ready. We operate on a zero-trust architecture. Permission policy data is encrypted at rest and in transit. Enterprise customers can deploy on-prem or in air-gapped environments. We undergo annual third-party penetration testing and publish the results.

Absolutely. Aegis's core policy engine runs entirely locally with zero network dependency. Permission enforcement, recursive traversal, and audit logging all execute on your infrastructure. Cloud sync for team audit dashboards is optional and can be disabled entirely for air-gapped deployments.

Root Shield is specifically designed to prevent catastrophic recursive permission changes at the filesystem root. Enable --preserve-root to block any recursive operation targeting /. For non-root directories, we recommend using Delta Reports (-c) to preview changes and verbose mode (-v) for full audit trails. Your compliance team will thank you.

Elevation Control provides first-class support for setuid (4000), setgid (2000), and sticky bit (1000) management. These special permission bits are accessible via both octal notation (e.g., 4755) and symbolic syntax (u+s, g+s, o+t). Aegis automatically handles the security considerations — set-group-ID bits are cleared when the file's group ID doesn't match the effective user's group, following best security practices.