arcline-project/landing
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rebrand landing for security practitioners, redesign, drop toolchain

Browse Source 
- Reposition Arcline OS as the OS for people who defend infrastructure
- Add Security Stack section (Wazuh, Suricata, ClamAV, OpenSCAP, Falco,
  gitleaks/trufflehog, syft/grype, Lynis) plus compliance-ready callout
- Reframe editions for SOC/blue-team/cloud-security audiences; add Kali
  and Security Onion comparisons; update meta/OG tags for security intent
- Remove the custom Arcline Toolchain (11 Go tools) and all references
- Redesign CSS: tactical near-black + amber palette, HUD details
  (hero grid, terminal caret + sigil, card corner brackets, status dot),
  sharpened nav/buttons, responsive fixups; both dark and light themes
This commit is contained in:
Blake Ridgway
2026-08-22 21:45:10 -05:00
parent 21b2cd7e88
commit 8ba41f7e3c
5 changed files with 475 additions and 203 deletions
Download Patch File Download Diff File Expand all files Collapse all files

185
templates/index.html
View File

@@ -6,15 +6,15 @@
<a href="/" class="logo">
<svg class="logo-icon" width="28" height="28" viewBox="0 0 32 32" fill="none">
<rect width="32" height="32" fill="#0b0c0e"/>
<path d="M5 27L16 5L27 27" fill="none" stroke="#0acf97" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/>
<path d="M9 20H23" fill="none" stroke="#0acf97" stroke-width="2.5" stroke-linecap="round"/>
<path d="M5 27L16 5L27 27" fill="none" stroke="#f59e0b" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/>
<path d="M9 20H23" fill="none" stroke="#f59e0b" stroke-width="2.5" stroke-linecap="round"/>
</svg>
<span>Arcline Project</span>
</a>
<nav>
<a href="#editions">Editions</a>
<a href="#security">Security</a>
<a href="#about">About</a>
<a href="#toolchain">Toolchain</a>
<a href="#contribute">Contribute</a>
<button
type="button"
@@ -48,13 +48,15 @@
<!-- Hero -->
<section class="hero">
<div class="hero-inner">
<p class="hero-sigil">// hardened · zero-telemetry · auditable</p>
<h1>
The Linux OS for<br>
<span class="hero-highlight">people who run infrastructure.</span>
<span class="hero-highlight">people who defend infrastructure.</span>
</h1>
<p class="tagline">
Hardened Debian base. Pre-configured monitoring, auditing, and security
tooling. Zero telemetry. Your systems are production-ready from first boot.
Hardened Debian base. Pre-configured security stack — SIEM agent, network
IDS, compliance scanning. Zero telemetry. Your systems are defense-ready
from first boot.
</p>
<div class="hero-actions">
<a href="#get-started" class="cta">Get Early Access</a>
@@ -69,7 +71,7 @@
<div class="section-label">Editions</div>
<h2>Our flagship Arcline OS variants<br>for different use cases.</h2>
<p class="section-desc">
Pick the edition that matches your workload. All share the same
Pick the edition that matches your role. All share the same
hardened Debian base and zero-telemetry guarantee.
</p>
<div class="editions-grid">
@@ -81,7 +83,7 @@
</svg>
</div>
<h3>Arcline Server</h3>
<p>A hardened, production-ready server OS with built-in observability and zero telemetry. Run applications on bare metal or the cloud.</p>
<p>A hardened, production-ready host for SOC and production use — built-in SIEM agent and network IDS on top of the hardened base, with zero telemetry.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Learn More</a>
@@ -97,7 +99,7 @@
</svg>
</div>
<h3>Arcline Workstation</h3>
<p>Same hardened base, with a lightweight KDE Plasma desktop, pre-configured dev toolchains, and privacy-hardened browser profiles.</p>
<p>A security analyst / blue-team workstation — KDE Plasma, pre-configured dev toolchains, privacy-hardened browser, forensics-friendly tooling, and secrets scanning.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Coming Soon</a>
@@ -114,7 +116,7 @@
</svg>
</div>
<h3>Arcline Cloud</h3>
<p>Minimal base images optimized for cloud infrastructures. Ready for AWS, GCP, Azure, or your own private cloud.</p>
<p>Minimal cloud images with a small attack surface — Falco runtime security and CIS benchmark scanning built in. Ready for AWS, GCP, Azure, or private cloud.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Learn More</a>
@@ -131,9 +133,9 @@
<h2>A Debian-derived OS that doesn't<br>make you start from scratch.</h2>
<p class="section-desc">
Debian gives you a rock-solid base. Arcline OS hardens it, layers on a
full observability stack, and ships with pre-configured container
infrastructure. No telemetry. No snap store. No cloud integration.
Just a secure, auditable OS that respects your hardware.
full security and observability stack, and ships with pre-configured
container infrastructure. No telemetry. No snap store. No cloud
integration. Just a secure, auditable OS that respects your hardware.
</p>
<div class="principles-grid">
<div class="principle">
@@ -145,7 +147,7 @@
</div>
<div>
<h3>Secure by default</h3>
<p>Hardened Linux kernel with seccomp, AppArmor profiles, and restrictive nftables firewall. You opt in to exposure — never out.</p>
<p>Hardened kernel with lockdown, seccomp, and AppArmor profiles. Default-deny nftables firewall. You opt in to exposure — never out.</p>
</div>
</div>
<div class="principle">
@@ -195,7 +197,7 @@
</div>
<div>
<h3>Infrastructure-aware</h3>
<p>Prometheus node_exporter, Grafana dashboards, and Loki log aggregation — pre-configured out of the box.</p>
<p>Observability that feeds your security stack — node_exporter, Grafana, Loki, and a pre-configured host security agent, out of the box.</p>
</div>
</div>
<div class="principle">
@@ -222,31 +224,20 @@
<div class="section-label">What's Included</div>
<h2>Production-ready from first boot.</h2>
<p class="section-desc">
Arcline OS layers pre-configured infrastructure tooling on top of a hardened
Debian base. Everything is documented, auditable, and yours.
Arcline OS layers pre-configured infrastructure and security tooling on top
of a hardened Debian base. Everything is documented, auditable, and yours.
</p>
<div class="stack-grid">
<div class="stack-card">
<div class="stack-header">Base System</div>
<ul>
<li>Debian stable (Trixie)</li>
<li>Debian stable (Bookworm)</li>
<li>Hardened Linux kernel (lockdown, seccomp)</li>
<li>btrfs root + snapshot rollback</li>
<li>nftables firewall (default-deny)</li>
<li>Docker + Podman containers</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Arcline Toolchain</div>
<ul>
<li>arcline-uptime — service monitoring</li>
<li>arcline-check — privacy auditor</li>
<li>arcline-audit — site health scanner</li>
<li>arcline-dns — propagation checker</li>
<li>arcline-vault — secrets store</li>
<li>arcline-email — self-hosted mail stack</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Developer Environment</div>
<ul>
@@ -269,61 +260,91 @@
</div>
</section>
<!-- Toolchain deep-dive -->
<section id="toolchain" class="section section-alt">
<!-- Security Stack -->
<section id="security" class="section">
<div class="section-inner">
<div class="section-label">The Toolchain</div>
<h2>11 Go tools. Built in production.<br>Yours to use.</h2>
<div class="section-label">Security Stack</div>
<h2>Defense-in-depth, pre-configured<br>from first boot.</h2>
<p class="section-desc">
Every Arcline tool was built to solve real infrastructure problems.
They run in production at Arcline IT. Now they ship with Arcline OS.
Beyond the hardened base, Arcline OS ships a named security tooling layer —
host and network detection, malware and secrets scanning, compliance and
runtime checks. Pre-configured, documented, and yours.
</p>
<div class="tool-grid">
<div class="tool">
<code>arcline-uptime</code>
<span>HTTP, TCP, TLS, DNS monitoring with Prometheus metrics export</span>
<div class="security-grid">
<div class="stack-card">
<div class="stack-header">Host IDS / SIEM</div>
<ul>
<li>Wazuh agent, pre-configured</li>
<li>Host + integrity telemetry to your SIEM</li>
</ul>
</div>
<div class="tool">
<code>arcline-check</code>
<span>CDN and transparency auditor — verifies sites aren't leaking data</span>
<div class="stack-card">
<div class="stack-header">Network IDS</div>
<ul>
<li>Suricata (or Zeek)</li>
<li>Detects malicious traffic, not just uptime</li>
</ul>
</div>
<div class="tool">
<code>arcline-audit</code>
<span>Full site health scanner — SSL, headers, performance, accessibility</span>
<div class="stack-card">
<div class="stack-header">Malware Scanning</div>
<ul>
<li>ClamAV baseline scanning</li>
<li>Scheduled and on-demand</li>
</ul>
</div>
<div class="tool">
<code>arcline-dns</code>
<span>DNS propagation checker across multiple resolvers</span>
<div class="stack-card">
<div class="stack-header">Compliance Scanning</div>
<ul>
<li>OpenSCAP + CIS Benchmark profiles</li>
<li>Mapped toward HIPAA, PCI-DSS, SOC 2</li>
</ul>
</div>
<div class="tool">
<code>arcline-vault</code>
<span>Encrypted secrets store with REST API and CLI</span>
<div class="stack-card">
<div class="stack-header">Runtime Security</div>
<ul>
<li>Falco — container / syscall anomalies</li>
<li>Cloud edition</li>
</ul>
</div>
<div class="tool">
<code>arcline-email</code>
<span>Self-hosted SMTP/IMAP stack — OpenSMTPD + Dovecot + Rspamd</span>
<div class="stack-card">
<div class="stack-header">Secrets Scanning</div>
<ul>
<li>gitleaks + trufflehog</li>
<li>Workstation / dev edition</li>
</ul>
</div>
<div class="tool">
<code>arcline-migrate</code>
<span>cPanel and Plesk to Arcline migration tool</span>
<div class="stack-card">
<div class="stack-header">Supply Chain / SBOM</div>
<ul>
<li>syft + grype</li>
<li>Know what's installed, catch known CVEs</li>
</ul>
</div>
<div class="tool">
<code>arcline-billing</code>
<span>Stripe-powered subscription management</span>
</div>
<div class="tool">
<code>arcline-portal</code>
<span>Customer dashboard with SSL monitoring and ticketing</span>
</div>
<div class="tool">
<code>arcline-website</code>
<span>Go HTTP server powering arcline.it</span>
</div>
<div class="tool">
<code>arcline-status</code>
<span>Static status page generator</span>
<div class="stack-card">
<div class="stack-header">System Auditing</div>
<ul>
<li>Lynis hardening score</li>
<li>Continuous, post-install</li>
</ul>
</div>
</div>
<div class="compliance-callout">
<div class="compliance-badge">Compliance-ready by default</div>
<p>
Arcline OS ships CIS Benchmark-aligned by default, with compliance scanning
mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
<strong>SOC 2</strong> control families. The OS itself isn't certified —
only audited deployments can be — but the defaults give you a running start.
</p>
</div>
<p class="security-note">
The Wazuh agent pairs naturally with
<a href="https://arcline.it" class="inline-link">Arcline IT's</a>
Wazuh-based managed monitoring. Want the whole stack run and watched for you?
Arcline IT's managed security services cover hardening, monitoring, and response.
</p>
</div>
</section>
@@ -351,9 +372,17 @@
<div class="compare-label">Alpine Linux</div>
<div class="compare-desc">Minimal and musl-based — ideal for containers, but limited as a full-featured server workstation.</div>
</div>
<div class="compare-card">
<div class="compare-label">Kali Linux</div>
<div class="compare-desc">A great offensive-security and pentesting toolkit — but built to break in, not to serve as a hardened daily-driver production OS.</div>
</div>
<div class="compare-card">
<div class="compare-label">Security Onion</div>
<div class="compare-desc">An excellent network security monitoring platform — but not a general-purpose or developer-ready OS for your day-to-day hosts.</div>
</div>
<div class="compare-card compare-highlight">
<div class="compare-label">Arcline OS</div>
<div class="compare-desc">Hardened Debian base. Pre-configured toolchain. Built-in observability. Zero telemetry. Ready to deploy.</div>
<div class="compare-desc">Hardened Debian base. Pre-configured security stack. Built-in observability. Zero telemetry. Ready to deploy.</div>
</div>
</div>
</div>
@@ -367,7 +396,7 @@
<p class="section-desc">
Arcline OS is open-source under the GPL. The code lives on
<a href="https://git.arcline.it" class="inline-link">git.arcline.it</a>.
Every tool, every config, every build script — auditable and forkable.
Every config, every build script — auditable and forkable.
</p>
<div class="contribute-grid">
<a href="https://git.arcline.it" class="contribute-card">
@@ -377,7 +406,7 @@
</svg>
</div>
<span>Browse the source</span>
<small>All 11 tools, build scripts, and infrastructure code.</small>
<small>Build scripts, packaging, and infrastructure code.</small>
</a>
<a href="https://git.arcline.it" class="contribute-card">
<div class="contribute-icon">
@@ -411,7 +440,7 @@
<div class="section-label">Get Started</div>
<h2>Arcline OS is in active development.<br>Be there at the start.</h2>
<p class="section-desc">
We're packaging the tools, building the ISO pipeline, and hardening the defaults.
We're building the ISO pipeline and hardening the defaults.
Sign up to receive early access and help shape the first release.
</p>
<form
@@ -452,6 +481,7 @@
<div class="sponsor-content">
<div class="sponsor-desc">
<p>The Arcline Project is funded and operated by <strong>Arcline IT LLC</strong> — the same model as Red Hat and Fedora. The commercial services business at <a href="https://arcline.it" class="inline-link">arcline.it</a> keeps the lights on so the OS stays independent and sustainable.</p>
<p>Arcline IT also offers managed security services — hardening, Wazuh-based monitoring, and response — for teams that want Arcline OS run and watched for them.</p>
</div>
<div class="sponsor-tagline">Secure by default. Self-hosted by principle.</div>
</div>
@@ -464,7 +494,7 @@
<div class="footer-grid">
<div class="footer-col">
<a href="/" class="footer-logo">Arcline Project</a>
<p>An open-source operating system for people who run infrastructure. Hardened Debian base. Zero telemetry. Production-ready.</p>
<p>An open-source operating system for people who defend infrastructure. Hardened Debian base. Pre-configured security stack. Zero telemetry. Defense-ready.</p>
</div>
<div class="footer-col">
<h4>Editions</h4>
@@ -478,7 +508,6 @@
<h4>Project</h4>
<ul>
<li><a href="#about">About</a></li>
<li><a href="#toolchain">Toolchain</a></li>
<li><a href="#contribute">Contribute</a></li>
<li><a href="https://git.arcline.it">Source Code</a></li>
</ul>