MONOXETA / ENTERPRISE OS / IN DEVELOPMENT
SECURITYFIRST.
One operating system for the whole enterprise. Encrypted from boot, bound to identity, managed centrally, with every business app delivered as a service.
DRAG TO ROTATE
THE PROBLEM
EVERY TOOL IS ANOTHER DOOR.
Most organisations run a patchwork: a desktop OS on each laptop, a dozen SaaS subscriptions, separate logins, local files everywhere. Each piece has its own policies, its own updates and its own gaps. Security becomes the work of stitching them together.
Scattered devices, scattered data, scattered identity.
One platform, one identity, one policy, one audit trail.
ONE PLATFORM
BUILT ON LINUX. RUN AS ONE SYSTEM.
Monoxeta is an enterprise OS on the Linux kernel with a Debian 13 base. Business apps run as services on a shared platform, reached from thin clients and secure desktops. A GNOME desktop with a black-and-white theme opens to a Portal at login.
SECURITY LAYERS
SEVEN LAYERS. NO GAPS BETWEEN THEM.
Scroll to assemble the stack, from hardware to apps.
THIN CLIENTS
THE DESK HOLDS NOTHING WORTH STEALING.
Apps run on the platform, not on the endpoint. Thin clients and secure desktops connect in, so devices are replaceable and policy follows the user, not the machine.
> usb device connected: mass storage
> usbguard: policy check…
> BLOCKED: USB storage not permitted
> usb device connected: keyboard
> ALLOWED: input device
APPS
THE WHOLE OFFICE. ONE SIGN-IN.
Business apps as services, plus LibreOffice and Collabora, and a signed Flatpak app store. A search-only AI assistant helps find what you already have.
CLASSIFICATION & DLP
EVERY FILE KNOWS WHAT IT IS.
ISO 27001-style classification with four levels. New content defaults to Confidential, and DLP enforces the label.
> open: q3-plan.odt [CONFIDENTIAL]
> attempt: copy to external drive
> DLP: action denied, event logged to audit
> session idle: screen locked
UPDATES THAT CAN'T BRICK
FAIL THREE TIMES. ROLL BACK AUTOMATICALLY.
A/B atomic updates install to the inactive slot. If the new system fails to boot three times, the machine returns to the last known-good slot on its own.
HOW IT COMPARES
| Capability | Monoxeta | Scattered SaaS | Generic desktop OS |
|---|---|---|---|
| Single sign-on across apps | Built in (Keycloak) | Varies; often add-on | Depends on setup |
| Full-disk encryption | TPM2 LUKS by default | N/A (vendor side) | Usually available |
| Data classification + DLP | 4 levels, default Confidential | Per-vendor, inconsistent | Typically third-party |
| Atomic updates with rollback | A/B, after 3 failed boots | Vendor-managed | Varies |
| USB storage control | USBGuard | N/A | Policy tools vary |
| Central audit trail | One trail, SIEM | One per vendor | Needs extra tooling |
| Maturity | In development | Mature products | Mature products |
THE HORIZON
NEXT: AI THAT STAYS IN THE BUILDING.
Today the assistant is search-only. A self-hosted AI model is planned, so answers never have to leave your infrastructure. Monoxeta is in development.