Files
landing/templates/index.html
Blake Ridgway 8ba41f7e3c Rebrand landing for security practitioners, redesign, drop toolchain
- Reposition Arcline OS as the OS for people who defend infrastructure
- Add Security Stack section (Wazuh, Suricata, ClamAV, OpenSCAP, Falco,
  gitleaks/trufflehog, syft/grype, Lynis) plus compliance-ready callout
- Reframe editions for SOC/blue-team/cloud-security audiences; add Kali
  and Security Onion comparisons; update meta/OG tags for security intent
- Remove the custom Arcline Toolchain (11 Go tools) and all references
- Redesign CSS: tactical near-black + amber palette, HUD details
  (hero grid, terminal caret + sigil, card corner brackets, status dot),
  sharpened nav/buttons, responsive fixups; both dark and light themes
2026-08-22 21:45:10 -05:00

529 lines
27 KiB
HTML

{{define "content"}}
<a href="#main" class="skip-link">Skip to main content</a>
<header class="nav">
<div class="nav-inner">
<a href="/" class="logo">
<svg class="logo-icon" width="28" height="28" viewBox="0 0 32 32" fill="none">
<rect width="32" height="32" fill="#0b0c0e"/>
<path d="M5 27L16 5L27 27" fill="none" stroke="#f59e0b" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/>
<path d="M9 20H23" fill="none" stroke="#f59e0b" stroke-width="2.5" stroke-linecap="round"/>
</svg>
<span>Arcline Project</span>
</a>
<nav>
<a href="#editions">Editions</a>
<a href="#security">Security</a>
<a href="#about">About</a>
<a href="#contribute">Contribute</a>
<button
type="button"
data-theme-toggle
class="theme-toggle"
aria-label="Toggle theme"
title="Toggle light / dark mode"
>
<svg class="theme-icon theme-icon-light" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<circle cx="12" cy="12" r="5"/>
<line x1="12" y1="1" x2="12" y2="3"/>
<line x1="12" y1="21" x2="12" y2="23"/>
<line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/>
<line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/>
<line x1="1" y1="12" x2="3" y2="12"/>
<line x1="21" y1="12" x2="23" y2="12"/>
<line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/>
<line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/>
</svg>
<svg class="theme-icon theme-icon-dark" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/>
</svg>
</button>
<a href="#get-started" class="nav-cta">Get Started</a>
</nav>
</div>
</header>
<main id="main">
<!-- Hero -->
<section class="hero">
<div class="hero-inner">
<p class="hero-sigil">// hardened · zero-telemetry · auditable</p>
<h1>
The Linux OS for<br>
<span class="hero-highlight">people who defend infrastructure.</span>
</h1>
<p class="tagline">
Hardened Debian base. Pre-configured security stack — SIEM agent, network
IDS, compliance scanning. Zero telemetry. Your systems are defense-ready
from first boot.
</p>
<div class="hero-actions">
<a href="#get-started" class="cta">Get Early Access</a>
<a href="#about" class="cta-secondary">Learn more</a>
</div>
</div>
</section>
<!-- Editions -->
<section id="editions" class="section">
<div class="section-inner">
<div class="section-label">Editions</div>
<h2>Our flagship Arcline OS variants<br>for different use cases.</h2>
<p class="section-desc">
Pick the edition that matches your role. All share the same
hardened Debian base and zero-telemetry guarantee.
</p>
<div class="editions-grid">
<div class="edition-card">
<div class="edition-icon">
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<rect x="2" y="2" width="20" height="20" rx="3"/>
<rect x="6" y="6" width="12" height="12" rx="1.5"/>
</svg>
</div>
<h3>Arcline Server</h3>
<p>A hardened, production-ready host for SOC and production use — built-in SIEM agent and network IDS on top of the hardened base, with zero telemetry.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Learn More</a>
</div>
</div>
<div class="edition-card">
<div class="edition-icon">
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<rect x="2" y="3" width="20" height="14" rx="2"/>
<path d="M8 21h8"/>
<path d="M12 17v4"/>
</svg>
</div>
<h3>Arcline Workstation</h3>
<p>A security analyst / blue-team workstation — KDE Plasma, pre-configured dev toolchains, privacy-hardened browser, forensics-friendly tooling, and secrets scanning.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Coming Soon</a>
</div>
</div>
<div class="edition-card">
<div class="edition-icon">
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<circle cx="12" cy="12" r="10"/>
<path d="M2 12h20"/>
<path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10"/>
<path d="M12 2a15.3 15.3 0 00-4 10 15.3 15.3 0 004 10"/>
</svg>
</div>
<h3>Arcline Cloud</h3>
<p>Minimal cloud images with a small attack surface — Falco runtime security and CIS benchmark scanning built in. Ready for AWS, GCP, Azure, or private cloud.</p>
<div class="card-actions">
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
<a href="#about" class="card-btn card-btn-secondary">Learn More</a>
</div>
</div>
</div>
</div>
</section>
<!-- What is Arcline OS -->
<section id="about" class="section section-alt">
<div class="section-inner">
<div class="section-label">What is Arcline OS?</div>
<h2>A Debian-derived OS that doesn't<br>make you start from scratch.</h2>
<p class="section-desc">
Debian gives you a rock-solid base. Arcline OS hardens it, layers on a
full security and observability stack, and ships with pre-configured
container infrastructure. No telemetry. No snap store. No cloud
integration. Just a secure, auditable OS that respects your hardware.
</p>
<div class="principles-grid">
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<rect x="3" y="3" width="18" height="18" rx="3"/>
<path d="M8 12l2.5 2.5L16 9"/>
</svg>
</div>
<div>
<h3>Secure by default</h3>
<p>Hardened kernel with lockdown, seccomp, and AppArmor profiles. Default-deny nftables firewall. You opt in to exposure — never out.</p>
</div>
</div>
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<circle cx="12" cy="12" r="10"/>
<path d="M12 6v6l4 2"/>
</svg>
</div>
<div>
<h3>Privacy-first</h3>
<p>Zero telemetry. Zero analytics. Zero cloud integration. No network calls you didn't initiate.</p>
</div>
</div>
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<rect x="2" y="2" width="20" height="20" rx="3"/>
<rect x="6" y="6" width="12" height="12" rx="1.5" stroke-dasharray="3 2"/>
</svg>
</div>
<div>
<h3>btrfs-native</h3>
<p>btrfs root with subvolume snapshots, transparent compression, and boot-to-snapshot rollback — not bolted on, built in.</p>
</div>
</div>
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<path d="M4 7h16v12H4V7z"/>
<path d="M8 3v4"/>
<path d="M16 3v4"/>
<path d="M4 13h16" stroke-dasharray="2 1"/>
</svg>
</div>
<div>
<h3>Developer-ready</h3>
<p>Go, Rust, Python, Node.js toolchains pre-configured. Git, Make, LLVM/Clang included. Start building immediately.</p>
</div>
</div>
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<circle cx="12" cy="12" r="3"/>
<path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
</svg>
</div>
<div>
<h3>Infrastructure-aware</h3>
<p>Observability that feeds your security stack — node_exporter, Grafana, Loki, and a pre-configured host security agent, out of the box.</p>
</div>
</div>
<div class="principle">
<div class="principle-icon">
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<path d="M4 4h8l4 4v12H4V4z"/>
<path d="M12 4v4h4"/>
<line x1="8" y1="12" x2="16" y2="12" stroke-opacity="0.5"/>
<line x1="8" y1="15" x2="13" y2="15" stroke-opacity="0.5"/>
</svg>
</div>
<div>
<h3>Fully documented</h3>
<p>Every feature and tool includes offline man pages and a hardening guide. You own the system — and you understand it.</p>
</div>
</div>
</div>
</div>
</section>
<!-- What's Included -->
<section class="section">
<div class="section-inner">
<div class="section-label">What's Included</div>
<h2>Production-ready from first boot.</h2>
<p class="section-desc">
Arcline OS layers pre-configured infrastructure and security tooling on top
of a hardened Debian base. Everything is documented, auditable, and yours.
</p>
<div class="stack-grid">
<div class="stack-card">
<div class="stack-header">Base System</div>
<ul>
<li>Debian stable (Bookworm)</li>
<li>Hardened Linux kernel (lockdown, seccomp)</li>
<li>btrfs root + snapshot rollback</li>
<li>nftables firewall (default-deny)</li>
<li>Docker + Podman containers</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Developer Environment</div>
<ul>
<li>Go, Rust, Python, Node.js</li>
<li>Git, Make, CMake, LLVM/Clang</li>
<li>Docker / Podman pre-configured</li>
<li>VS Code / Helix / Vim configs</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Observability</div>
<ul>
<li>Prometheus node_exporter</li>
<li>Grafana dashboards</li>
<li>Loki log aggregation</li>
<li>Pre-built alerting rules</li>
</ul>
</div>
</div>
</div>
</section>
<!-- Security Stack -->
<section id="security" class="section">
<div class="section-inner">
<div class="section-label">Security Stack</div>
<h2>Defense-in-depth, pre-configured<br>from first boot.</h2>
<p class="section-desc">
Beyond the hardened base, Arcline OS ships a named security tooling layer —
host and network detection, malware and secrets scanning, compliance and
runtime checks. Pre-configured, documented, and yours.
</p>
<div class="security-grid">
<div class="stack-card">
<div class="stack-header">Host IDS / SIEM</div>
<ul>
<li>Wazuh agent, pre-configured</li>
<li>Host + integrity telemetry to your SIEM</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Network IDS</div>
<ul>
<li>Suricata (or Zeek)</li>
<li>Detects malicious traffic, not just uptime</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Malware Scanning</div>
<ul>
<li>ClamAV baseline scanning</li>
<li>Scheduled and on-demand</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Compliance Scanning</div>
<ul>
<li>OpenSCAP + CIS Benchmark profiles</li>
<li>Mapped toward HIPAA, PCI-DSS, SOC 2</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Runtime Security</div>
<ul>
<li>Falco — container / syscall anomalies</li>
<li>Cloud edition</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Secrets Scanning</div>
<ul>
<li>gitleaks + trufflehog</li>
<li>Workstation / dev edition</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">Supply Chain / SBOM</div>
<ul>
<li>syft + grype</li>
<li>Know what's installed, catch known CVEs</li>
</ul>
</div>
<div class="stack-card">
<div class="stack-header">System Auditing</div>
<ul>
<li>Lynis hardening score</li>
<li>Continuous, post-install</li>
</ul>
</div>
</div>
<div class="compliance-callout">
<div class="compliance-badge">Compliance-ready by default</div>
<p>
Arcline OS ships CIS Benchmark-aligned by default, with compliance scanning
mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
<strong>SOC 2</strong> control families. The OS itself isn't certified —
only audited deployments can be — but the defaults give you a running start.
</p>
</div>
<p class="security-note">
The Wazuh agent pairs naturally with
<a href="https://arcline.it" class="inline-link">Arcline IT's</a>
Wazuh-based managed monitoring. Want the whole stack run and watched for you?
Arcline IT's managed security services cover hardening, monitoring, and response.
</p>
</div>
</section>
<!-- Why Arcline OS -->
<section class="section">
<div class="section-inner">
<div class="section-label">Why Arcline OS?</div>
<h2>No major Linux distro ships<br>pre-hardened for production.</h2>
<p class="section-desc">
Debian gives you the packages. Arcline OS assembles them into a finished
system. A privacy-first, zero-telemetry operating system with built-in
monitoring, auditing, and security — configured the way you'd do it
yourself, if you had the weekend.
</p>
<div class="compare-grid">
<div class="compare-card">
<div class="compare-label">Ubuntu Server</div>
<div class="compare-desc">Great ecosystem and hardware support — but Snap packages and cloud integration are baked in by default.</div>
</div>
<div class="compare-card">
<div class="compare-label">Fedora Server</div>
<div class="compare-desc">Cutting-edge kernel and tooling — but rapid release cycles mean more churn on production machines.</div>
</div>
<div class="compare-card">
<div class="compare-label">Alpine Linux</div>
<div class="compare-desc">Minimal and musl-based — ideal for containers, but limited as a full-featured server workstation.</div>
</div>
<div class="compare-card">
<div class="compare-label">Kali Linux</div>
<div class="compare-desc">A great offensive-security and pentesting toolkit — but built to break in, not to serve as a hardened daily-driver production OS.</div>
</div>
<div class="compare-card">
<div class="compare-label">Security Onion</div>
<div class="compare-desc">An excellent network security monitoring platform — but not a general-purpose or developer-ready OS for your day-to-day hosts.</div>
</div>
<div class="compare-card compare-highlight">
<div class="compare-label">Arcline OS</div>
<div class="compare-desc">Hardened Debian base. Pre-configured security stack. Built-in observability. Zero telemetry. Ready to deploy.</div>
</div>
</div>
</div>
</section>
<!-- Contribute -->
<section id="contribute" class="section section-alt">
<div class="section-inner">
<div class="section-label">Community</div>
<h2>Built in the open. Shaped by the<br>people who use it.</h2>
<p class="section-desc">
Arcline OS is open-source under the GPL. The code lives on
<a href="https://git.arcline.it" class="inline-link">git.arcline.it</a>.
Every config, every build script — auditable and forkable.
</p>
<div class="contribute-grid">
<a href="https://git.arcline.it" class="contribute-card">
<div class="contribute-icon">
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0020 4.77 5.07 5.07 0 0019.91 1S18.73.65 15.23 2.5a13.38 13.38 0 00-7 0C5.27.65 4.09 1 4.09 1A5.07 5.07 0 004 4.77a5.44 5.44 0 00-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 008 18.13V22"/>
</svg>
</div>
<span>Browse the source</span>
<small>Build scripts, packaging, and infrastructure code.</small>
</a>
<a href="https://git.arcline.it" class="contribute-card">
<div class="contribute-icon">
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<path d="M14 2H6a2 2 0 00-2 2v16a2 2 0 002 2h12a2 2 0 002-2V8z"/>
<polyline points="14 2 14 8 20 8"/>
<line x1="16" y1="13" x2="8" y2="13"/>
<line x1="16" y1="17" x2="8" y2="17"/>
</svg>
</div>
<span>Read the docs</span>
<small>Hardening guides, install docs, and infrastructure cookbook.</small>
</a>
<a href="https://git.arcline.it" class="contribute-card">
<div class="contribute-icon">
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
<circle cx="12" cy="12" r="10"/>
<path d="M12 6v6l4 2"/>
</svg>
</div>
<span>Contribute</span>
<small>Submit patches, report issues, or join the discussion.</small>
</a>
</div>
</div>
</section>
<!-- Get Started -->
<section id="get-started" class="section">
<div class="section-inner">
<div class="section-label">Get Started</div>
<h2>Arcline OS is in active development.<br>Be there at the start.</h2>
<p class="section-desc">
We're building the ISO pipeline and hardening the defaults.
Sign up to receive early access and help shape the first release.
</p>
<form
hx-post="/partials/waitlist"
hx-target="#waitlist-result"
hx-swap="outerHTML"
class="waitlist-form"
>
<fieldset class="edition-checkboxes">
<legend>I'm interested in:</legend>
<label class="edition-checkbox">
<input type="checkbox" name="edition" value="server" checked>
<span>Server</span>
</label>
<label class="edition-checkbox">
<input type="checkbox" name="edition" value="workstation">
<span>Workstation</span>
</label>
</fieldset>
<input
type="email"
name="email"
placeholder="you@example.com"
required
class="input"
>
<button type="submit" class="btn">Get Early Access</button>
</form>
<div id="waitlist-result"></div>
<p class="waitlist-note">No spam. No tracking. We'll only email you when there's something to try.</p>
</div>
</section>
<!-- Sponsor -->
<section class="section section-alt sponsor-section">
<div class="section-inner">
<div class="section-label">Sponsored By</div>
<div class="sponsor-content">
<div class="sponsor-desc">
<p>The Arcline Project is funded and operated by <strong>Arcline IT LLC</strong> — the same model as Red Hat and Fedora. The commercial services business at <a href="https://arcline.it" class="inline-link">arcline.it</a> keeps the lights on so the OS stays independent and sustainable.</p>
<p>Arcline IT also offers managed security services — hardening, Wazuh-based monitoring, and response — for teams that want Arcline OS run and watched for them.</p>
</div>
<div class="sponsor-tagline">Secure by default. Self-hosted by principle.</div>
</div>
</div>
</section>
</main>
<footer class="footer">
<div class="footer-grid">
<div class="footer-col">
<a href="/" class="footer-logo">Arcline Project</a>
<p>An open-source operating system for people who defend infrastructure. Hardened Debian base. Pre-configured security stack. Zero telemetry. Defense-ready.</p>
</div>
<div class="footer-col">
<h4>Editions</h4>
<ul>
<li><a href="#editions">Server</a></li>
<li><a href="#editions">Workstation</a></li>
<li><a href="#editions">Cloud</a></li>
</ul>
</div>
<div class="footer-col">
<h4>Project</h4>
<ul>
<li><a href="#about">About</a></li>
<li><a href="#contribute">Contribute</a></li>
<li><a href="https://git.arcline.it">Source Code</a></li>
</ul>
</div>
<div class="footer-col">
<h4>Connect</h4>
<ul>
<li><a href="https://arcline.it">Arcline IT</a></li>
<li><a href="https://git.arcline.it">Git</a></li>
</ul>
</div>
</div>
<div class="footer-bottom">
<p>&copy; 2026 Arcline IT LLC. GPL Licensed. No telemetry. No tracking.</p>
</div>
</footer>
{{end}}