Arcline Workstation
A security analyst / blue-team workstation — KDE Plasma, pre-configured dev toolchains, a privacy-hardened browser, forensics-friendly tooling, and secrets scanning.
Built for the people on
the front line.
Arcline Workstation pairs a hardened base with the tools analysts and security-minded developers use every day — without the telemetry that most desktops quietly ship.
KDE Plasma desktop
A lightweight, fully configurable desktop — tuned for long working sessions.
Privacy-hardened browser
A browser profile locked down out of the box — no tracking, no telemetry, no surprises.
Secrets scanning
gitleaks and trufflehog pre-configured — catch leaked keys before they ship.
Dev toolchains ready
Go, Rust, Python, and Node.js toolchains pre-configured. Git, Make, and LLVM/Clang included.
Forensics-friendly
Tooling and a disk layout that make analysis and evidence handling straightforward.
Hardened base
The same hardened Debian base, btrfs snapshots, and default-deny firewall as every edition.
An analyst's desk, pre-configured.
Everything a blue-team or security-conscious developer needs to be productive on day one.
- KDE Plasma
- Privacy-hardened browser profile
- Forensics-friendly tooling
- Go, Rust, Python, Node.js
- Git, Make, CMake, LLVM/Clang
- VS Code / Helix / Vim configs
- Docker / Podman
- gitleaks + trufflehog secrets scanning
- ClamAV baseline scanning
- Lynis hardening score
- OpenSCAP + CIS profiles
- Hardened Debian base
- Lockdown-mode kernel + seccomp
- btrfs root + snapshot rollback
- Zero telemetry
Arcline Workstation ships CIS Benchmark-aligned by default, with OpenSCAP scanning mapped toward HIPAA, PCI-DSS, and SOC 2 control families. The OS itself isn't certified — only audited deployments can be — but the defaults give you a running start.
One hardened base. Three editions.
Every edition shares the same hardened Debian base and zero-telemetry guarantee.
Arcline Workstation is in active development.
Be there at the start.
We're building the ISO pipeline and hardening the defaults. Sign up to receive early access and help shape the first release.
No spam. No tracking. We'll only email you when there's something to try.