TRUST CENTER · OUTLINE · IN DEVELOPMENT

HOW MONOXETA IS BUILT.

1. Architecture

Linux kernel, Debian 13 base. Business apps run as services on a shared platform reached from thin clients and secure desktops (GNOME, Portal at login).

2. Boot & disk

Secure Boot-ready A/B atomic updates with automatic rollback after 3 failed boots. TPM2-backed LUKS full-disk encryption with auto-unlock.

3. Identity

SSO via Keycloak with Samba AD and TOTP two-step login.

4. Data

ISO 27001-style classification (Public, Internal, Confidential, Restricted), default Confidential, with DLP. Secrets encrypted at rest (sops/age).

5. Devices & monitoring

FleetDM/osquery device management, USBGuard USB storage blocking, SIEM and monitoring, audit trail. Hardening checked with Lynis (index 75).

6. Responsible disclosure

Placeholder. TODO: disclosure policy, contact address and response process to be defined.

This page is an outline and does not represent certifications or audits.