AEGIS

A project by Ahmed Kadhem Al Kadhem SAIF 2026

A Saudi-made firewall that understands business rules.

Press the arrow key, swipe, or tap to start

01 · The problem

Some attacks look completely normal.

Firewalls stop hackers who look like hackers. But a request can look clean and still break the business’s rules.

These are called business-logic flaws.

ExampleSomeone asks for a 900 SAR refund on a 300 SAR order.
ExampleAn employee approves their own payment.

02 · The big idea

Meaning, not looks.

Same request Refund900 SAR Paid300 SAR

A normal firewall asks “How does this request look?” Looks clean, allowed The refund goes through.

AEGIS asks “What does this request mean?” Blocked Reason shown: the refund is more than what was paid.

A still illustration with pre-written text.

03 · What AEGIS is made of

One part finds. One part blocks.

Find & prove AegisForge Looks for business-logic flaws in an app. When it finds one, it proves it.

Block AegisWall Sits in front of the website and blocks requests that break the business’s rules.

04 · AegisForge

It doesn’t just report a flaw. It proves it.

It looks where a request can seem normal but still break the rules:

Refunds
Approvals
Payments

The evidence is saved as a sealed proof pack. Anyone can check it offline.

Evidence untouched VALID

One byte changed BROKEN

If even one byte of the evidence is changed, the check says BROKEN instead of VALID. This was tested. Illustration only: each square stands for a piece of the evidence.

05 · AegisWall

It stands in front of the website.

It checks every request against the business’s rules. These rules are learned, not a fixed list of known attack patterns.

A normal 200 SAR refund Allowed
A 900 SAR refund on a 300 SAR order BlockedA refund can’t be more than what was paid.
A different person approves the request Allowed
Someone approves their own request BlockedNobody approves their own request.

These four are tested examples.

06 · Step by step

From finding a flaw to blocking it.

Seven steps, with proof kept along the way.

AegisForge
The rule
A human
AegisWall

FindAegisForge finds a business-logic flaw.
ProveIt proves the flaw and seals the evidence in a proof pack.
Suggest a ruleA rule is proposed to stop that flaw.
Test it firstIt’s replayed against the attack and normal requests, to check it works and doesn’t hurt real customers.
Human approvesA named person switches it on. Until then, it only watches.
Block with a reasonAegisWall blocks the bad requests and explains why.
Proof for every decisionEvery block or allow is saved as evidence.

07 · Why it matters

It catches what looks clean, and stays careful.

Nothing switches on by itself A named person approves every new rule. Before that, it only watches.
A clear reason for every block When it blocks a request, it says which rule was broken.
Proof that can’t be secretly edited Every decision is saved as proof that can be checked later.
Fake success for attack bots Optional and off by default. Flagged bots get answers that aren’t real, so they waste their time.

And the shop’s own code doesn’t need to change.

AEGIS in one line

It checks what a request means, not how it looks.

Built by Ahmed Kadhem Al Kadhem for SAIF 2026. Made in Saudi Arabia.

Visit the AEGIS site See the technology

The technology page lists 14 new techniques, each backed by a passing test.

AEGIS

Have a project in mind?