Cerberus Security Solutions

AEGIS™

The only commercial off-the-shelf software suite built specifically for ICD 705 SCIF and SAPF accreditation.
Built for the field. Trusted at accreditation.

Explore AEGIS™ Schedule a Briefing
Scroll
CMMC Level 2 ICD 705 Compliant Air-Gapped by Design DoD Proven IACET Accredited Training

The agencies and contractors who build classified space cannot afford a failed accreditation inspection. AEGIS™ makes sure they never have one.

Technology Platform

Three tiers.
One secure platform.

AEGIS™ is purpose-built for ICD 705 construction security — a three-tier air-gapped system that takes a project from first inspection to final accreditation package without a single byte leaving the secure perimeter.

110+
NIST 800-171 controls addressed
133
ICD 705 Tech Spec criteria built in

Field

AEGIS™ Field

Tablet-native inspection platform for CSTs on site. Room-by-room ICD 705 inspections, photo documentation, and deficiency capture — fully offline.

  • IC Tech Spec v1.5.1 requirements, element by element
  • Works fully offline; syncs over a wired dock
  • Built for Surface Pro 10

Station

AEGIS™ Station

On-site sync hub running as a hardened Windows service. Aggregates Field data from multiple tablets, maintains chain of custody, and stages records for Office.

  • Encrypted, identity-checked sync for every tablet
  • Wired dock — no Wi-Fi, no internet
  • Automatic Delayed Start Windows service

Office

AEGIS™ Office

Desktop command workstation for SSMs and administrators. Full project lifecycle, audit reporting, role-based access, and AI-assisted accreditation package generation.

  • Granular RBAC: SSM, CST, Admin roles
  • Full audit trail and CUI-compliant handling
  • AI documentation drafting — no cloud required

Air-Gapped Intelligence

Built-in AI Documentation. No Internet. No Cloud. No Exceptions.

AEGIS™ Office includes a built-in AI documentation engine running entirely on the local workstation — inside your secure perimeter. It drafts Fixed Facility Checklists, Construction Security Plans, Pre-Construction Checklists, TEMPEST Checklists, and Compartmented Area Checklists without an internet connection, a cloud subscription, or a single byte leaving your facility.

Coming Soon On-site construction photo validation against ICD-705 requirements — flagging issues before the CST leaves the site.

AEGIS™ in Action

Every wall segment.
Every penetration.
Every requirement.

CSTs inspect room by room on a Surface Pro tablet. AEGIS™ checks each element against the IC Tech Spec for ICD/ICS 705, makes sure every Fail reaches the SSM, and brings it all together at Station.

Facility
Building 4 Secure Area
One project per SCIF or SAPF
Room
Room 106
Use and Sound Group
Element
South wall, segment 1
Each segment, door and penetration
Requirement
3.C.2.a
Pass, Fail or N/A, with justification
AEGIS element inspection screen
A wall segment checked against the Tech Spec requirements that apply to it.

Screens show sample data.

Security Architecture

Built for the space
it helps you accredit.

AEGIS™ is designed around the same assumption as the SCIF itself: nothing leaves the perimeter, and every action has a name on it. There's no cloud, no internet connection and no wireless sync.

How a tablet earns trust

  1. 01
    Enrolled at Station
    The SSM pairs each new tablet at Station with a one-time code.
  2. 02
    Bound to its Station
    The tablet records Station's identity and refuses to sync with any other machine.
  3. 03
    Verified on every dock
    Every sync is encrypted and checked against that identity.
  4. 04
    Renewed or retired
    Docking keeps a tablet licensed. A lost tablet is retired from Station in one step.

Air-Gapped

No cloud. No radios.

Everything runs inside your perimeter. Field tablets ship with Wi-Fi, Bluetooth and NFC turned off in firmware.

  • No internet connection required, ever
  • No external accounts or online activation

Wired Sync

One cable, one trusted Station

Tablets sync only over the dock cable, encrypted, and only with the Station they were enrolled to. Another computer on the cable can't pose as Station.

  • Every tablet individually enrolled
  • Lost tablets retired in one step

Tamper-Evident

Evidence you can defend

Every photo is cryptographically fingerprinted when it's taken and verified when it reaches Station. Earlier inspections are kept, never overwritten.

  • Re-inspections add a new record
  • Changes after sync are flagged for SSM review

Accountable

Every action has a name on it

Role-based access separates inspectors from the SSM. SSM acknowledgments, notes, reviews and closures are all logged with the person and the time.

  • Only the SSM or an administrator closes a deficiency
  • Fail and N/A always require a justification

Locked Down

The tablet is AEGIS™

Field tablets boot straight into AEGIS™ with firmware settings locked and the drive encrypted, so users can't reach Windows, settings or code.

  • Firmware settings locked
  • Encrypted drive

Minimal Exposure

Less on the tablet

Station keeps the complete record. Tablets carry only what the field needs, so a lost tablet holds far less.

  • Nothing unsynced or open is ever removed

Signed, Offline Licensing

Your records are never held hostage.

Licenses are digitally signed by Cerberus and checked entirely offline. Moving a clock backward doesn't extend a license, and an honest clock fault never locks a site out. When a term ends, AEGIS™ becomes read-only: every record can still be viewed and exported.

No phone-homeValidated without a network
Clock-tamper awareRollback detected and logged
Renewal notices90, 60 and 30 days ahead
Read-only, not lockedView and export always work

Capabilities

Everything an accreditation effort runs on.

Beyond document drafting, AEGIS™ manages the full accreditation lifecycle — tracking, correspondence, and oversight — with every action audited and role-restricted, entirely inside the secure perimeter.

Document Management

Classified document control

A versioned store for every accreditation document, searchable and organized by project.

  • Full version history on every document
  • Full-text search across the library
  • Central registry tied to each project

Case & Deficiency Workflow

From open to accredited

A controlled workflow that carries each effort through review, submission, and accreditation.

  • Guided case status workflow
  • Deficiency tracking by severity and status
  • Compliance-gap and POA&M management

Authorizing Official Engagement

AO correspondence and decisions

A complete record of every exchange with the Authorizing Official, from first contact to final decision.

  • Communications log with follow-ups
  • Accreditation package submissions
  • AO decision tracking

Advisory AI — Air-Gapped

AI suggests; a cleared person decides

On-workstation AI that accelerates review without ever auto-applying a determination.

  • Suggested document classification
  • Deficiency triage: severity & corrective action
  • Human-confirmed — never automatic

Every capability runs air-gapped, behind role-based access control, with a tamper-evident audit trail — aligned to CMMC Level 2 (NIST SP 800-171).

What AEGIS Generates

Every document an accreditation package needs.

AEGIS™ assembles a complete, inspector-ready ICD 705 accreditation package — most documents drafted with built-in, air-gapped AI assistance. No cloud, no subscription, not a single byte leaving your facility.

Fixed Facility Checklist (FFC)
The core accreditation document, generated directly from your project record.
AI-Assisted
Construction Security Plan (CSP)
Phase-by-phase security procedures for the full construction lifecycle.
AI-Assisted
Construction Approval (CA) Request
Pre-construction approval package prepared for the Accrediting Official.
Pre-Construction Survey
Baseline site and structural assessment captured before work begins.
AI-Assisted
TEMPEST & Acoustic (STC) Documentation
RF emanation and sound-attenuation test records with vendor attribution.
AI-Assisted
Compartmented Area Checklist
Documentation for compartmented areas within the accredited space.
AI-Assisted
Interim Compensatory Measures (ICM)
Documented stopgaps and risk acceptance when requirements aren't yet met.
AI-Assisted
Co-Use Agreements
Shared-facility agreements, participating organizations, and obligations.
POA&M
Plan of Action & Milestones tracking every open item to closure.
Deficiency & Inspection Reports
Findings tracked from identification through correction and sign-off.
Daily Security Log
Per-day site security record across the construction period.
Entry / Access List (EAL)
Badged-personnel roster with QR-based access control and history.
Phylax Academy

Training & Certification

Phylax Academy.
Workforce ready.

IACET-accredited training that prepares construction and security personnel to build compliant, inspectable classified spaces — the first time and every time.

SSM
Site Security Manager
Construction Security Plan implementation and on-site security oversight
CST
Construction Surveillance Technician
Continuous surveillance of uncleared workers and material inspection
CAG
Cleared American Guard
Cleared U.S.-citizen access control and security presence on site

Who We Are

Built by people who've stood inside the perimeter.

Cerberus Security Solutions was founded by practitioners who have built SCIFs, conducted ICD 705 inspections, and learned exactly where documentation fails and accreditations fall apart. AEGIS™ exists because we needed it ourselves and nothing adequate existed.

01
Security Is the Product

Every architectural decision in AEGIS™ was made by people who understand what's at stake behind that cleared perimeter.

02
Built for the Field

Tablets in active construction sites. AEGIS™ works offline, syncs securely, and doesn't require an IT department to deploy.

03
First-Time Pass Rate

Clients arrive at accreditation inspections with complete, organized, defensible documentation — and it shows in the results.

Get In Touch

Ready to secure your build?

Schedule a briefing, request a demo, or ask a question. We respond within one business day.

✉️
services@thecerberussecuritygroup.com