199 lines
9.2 KiB
HTML
199 lines
9.2 KiB
HTML
{{define "content"}}
|
|
{{template "nav" .}}
|
|
|
|
<main id="main">
|
|
|
|
<!-- Hero -->
|
|
<section class="hero hero-page">
|
|
<div class="hero-inner">
|
|
<h1>Arcline <span class="hero-highlight">Cloud</span></h1>
|
|
<p class="tagline">
|
|
Minimal cloud images with a small attack surface — Falco runtime security
|
|
and CIS benchmark scanning built in. Ready for AWS, GCP, Azure, or your
|
|
own private cloud.
|
|
</p>
|
|
<div class="hero-actions">
|
|
<a href="#get-started" class="cta">Get Early Access</a>
|
|
<a href="/" class="cta-secondary">See all editions</a>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Overview -->
|
|
<section class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Overview</div>
|
|
<h2>Small footprint. Tight posture.<br>Security-first from the image.</h2>
|
|
<p class="section-desc">
|
|
Arcline Cloud is built for workloads that need the smallest possible attack
|
|
surface — a minimal hardened base with runtime and compliance watching built in.
|
|
</p>
|
|
<div class="principles-grid">
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="10"/>
|
|
<path d="M2 12h20"/>
|
|
<path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Minimal attack surface</h3>
|
|
<p>Nothing installed that you didn't ask for. Less to run, less to exploit, less to patch.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="3"/>
|
|
<path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Runtime security</h3>
|
|
<p>Falco watches for anomalous container and syscall behavior — in production, not just at install.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="3" y="3" width="18" height="18" rx="3"/>
|
|
<path d="M8 12l2.5 2.5L16 9"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>CIS scanning built in</h3>
|
|
<p>OpenSCAP with CIS Benchmark profiles, so posture checks are part of the image — not an afterthought.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="2" y="2" width="20" height="20" rx="3"/>
|
|
<rect x="6" y="6" width="12" height="12" rx="1.5" stroke-dasharray="3 2"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Hardened by default</h3>
|
|
<p>The same hardened Debian base — lockdown-mode kernel, seccomp, AppArmor — as every edition.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="10"/>
|
|
<path d="M2 12h20"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Zero telemetry</h3>
|
|
<p>No phone-home, no analytics, no cloud integration you didn't opt into.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="2" y="2" width="20" height="20" rx="3"/>
|
|
<path d="M12 2v20"/>
|
|
<path d="M2 12h20"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Cloud-ready images</h3>
|
|
<p>Minimal images ready for AWS, GCP, Azure, or your own private cloud.</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- What's Included -->
|
|
<section class="section section-alt">
|
|
<div class="section-inner">
|
|
<div class="section-label">What's Included</div>
|
|
<h2>A security posture you can ship.</h2>
|
|
<p class="section-desc">
|
|
Arcline Cloud images are built around a minimal footprint with runtime and
|
|
compliance security in the image itself.
|
|
</p>
|
|
<div class="security-grid">
|
|
<div class="stack-card">
|
|
<div class="stack-header">Base Image</div>
|
|
<ul>
|
|
<li>Minimal hardened Debian base</li>
|
|
<li>Small package footprint</li>
|
|
<li>btrfs root + snapshots</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Runtime Security</div>
|
|
<ul>
|
|
<li>Falco container / syscall detection</li>
|
|
<li>seccomp + AppArmor</li>
|
|
<li>Default-deny nftables</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Compliance</div>
|
|
<ul>
|
|
<li>OpenSCAP + CIS Benchmark profiles</li>
|
|
<li>syft + grype SBOM / CVE scanning</li>
|
|
<li>Lynis hardening score</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Platforms</div>
|
|
<ul>
|
|
<li>AWS</li>
|
|
<li>GCP</li>
|
|
<li>Azure</li>
|
|
<li>Private cloud</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<div class="compliance-callout">
|
|
<div class="compliance-badge">Compliance-ready by default</div>
|
|
<p>
|
|
Arcline Cloud images ship CIS Benchmark-aligned by default, with OpenSCAP
|
|
scanning mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
|
|
<strong>SOC 2</strong> control families. The images themselves aren't certified —
|
|
only audited deployments can be — but the defaults give you a running start.
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Other Editions -->
|
|
<section class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Other Editions</div>
|
|
<h2>One hardened base. Three editions.</h2>
|
|
<p class="section-desc">
|
|
Every edition shares the same hardened Debian base and zero-telemetry guarantee.
|
|
</p>
|
|
<div class="edition-switcher">
|
|
<a href="/server" class="card-btn card-btn-secondary">Server</a>
|
|
<a href="/workstation" class="card-btn card-btn-secondary">Workstation</a>
|
|
<a href="/cloud" class="card-btn card-btn-primary" aria-current="page">Cloud</a>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Get Started -->
|
|
<section id="get-started" class="section section-alt">
|
|
<div class="section-inner">
|
|
<div class="section-label">Get Started</div>
|
|
<h2>Arcline Cloud is in active development.<br>Be there at the start.</h2>
|
|
<p class="section-desc">
|
|
We're building the ISO pipeline and hardening the defaults.
|
|
Sign up to receive early access and help shape the first release.
|
|
</p>
|
|
{{template "waitlistForm" .}}
|
|
</div>
|
|
</section>
|
|
|
|
</main>
|
|
|
|
{{template "footer" .}}
|
|
{{end}}
|