Arcline Server

A hardened, production-ready host for SOC and production use — built-in SIEM agent and network IDS on top of the hardened Debian base, with zero telemetry.

Get Early Access See all editions
Overview

A production host that starts
defense-ready.

Arcline Server gives SOC teams and production workloads a hardened base and the tooling to watch it — configured the way you'd do it yourself, if you had the weekend.

Hardened by default

Lockdown-mode kernel, seccomp, AppArmor profiles, and a default-deny nftables firewall. You opt in to exposure — never out.

SIEM-ready

A pre-configured Wazuh agent ships host and integrity telemetry straight to your SIEM out of the box.

Network IDS

Suricata (or Zeek) watches for malicious traffic — not just uptime.

Rollback built in

btrfs root with subvolume snapshots, compression, and boot-to-snapshot rollback.

Observable

Prometheus node_exporter, Grafana dashboards, and Loki log aggregation — pre-configured.

Zero telemetry

No analytics, no phone-home, no cloud integration you didn't ask for. Your host talks to you, and no one else.

What's Included

Everything a defended server needs.

Arcline Server ships the base, the watchdogs, and the dashboards — pre-configured and documented.

Base System
  • Hardened Debian base
  • Lockdown-mode kernel + seccomp
  • btrfs root + snapshot rollback
  • nftables firewall (default-deny)
Security Stack
  • Wazuh agent (pre-configured)
  • Suricata / Zeek network IDS
  • OpenSCAP + CIS Benchmark profiles
  • Lynis hardening score
Observability
  • Prometheus node_exporter
  • Grafana dashboards
  • Loki log aggregation
  • Pre-built alerting rules
Containers
  • Docker + Podman
  • syft + grype SBOM / CVE scanning
  • ClamAV baseline scanning
Compliance-ready by default

Arcline Server ships CIS Benchmark-aligned by default, with OpenSCAP scanning mapped toward HIPAA, PCI-DSS, and SOC 2 control families. The OS itself isn't certified — only audited deployments can be — but the defaults give you a running start.

Other Editions

One hardened base. Three editions.

Every edition shares the same hardened Debian base and zero-telemetry guarantee.

Server Workstation Cloud
Get Started

Arcline Server is in active development.
Be there at the start.

We're building the ISO pipeline and hardening the defaults. Sign up to receive early access and help shape the first release.

I'm interested in:

No spam. No tracking. We'll only email you when there's something to try.