Providing effective and scalable real-time security to Inter- net of Things devices can be a challenging task given the limited computational capacity of the devices and the amount of network traffic that can be viewed at any given time. Multi- Agent Systems have proven to be a valuable tool within the areas of cyber security, distributed networks and legacy systems because of their scalable and flexible architecture. In this paper we present a novel implementation of a Completely Decentralised Multi-Agent System for use within, or to support, Internet of Things networks through the distributed processing of security events to offload the computational cost of data processing from Internet of Things devices. The concepts of conditions and effects are introduced to allow agents to describe digital evidence found in an abstract language instead of sharing individual pieces of data to mitigate concerns of data leakage in extended networks. Emphasis is placed upon the scalable architecture design al- lowing domain experts to independently create agents specific to a particular technology or application process which will automatically work with other existing agents without further configuration
