Kapstone.Systems Hardened Images
Kapstone Hardened AlmaLinux 9
The hardened operating system alone, for organizations deploying their own applications.
A STIG-applied, FIPS-enabled AlmaLinux 9 image. 433 STIG checks passing, zero CAT I findings, every remaining item documented.
What is hardened
- AlmaLinux 9 with the DISA STIG profile applied; all exceptions documented
- FIPS mode enabled at installation; the operating system crypto policy restricts the system to FIPS 140-3 validated cryptographic modules
- SELinux in enforcing mode
- fapolicyd application allow-listing
- auditd configured with the STIG audit rule set
- Authentication by customer-supplied SSH keys only (RSA; ed25519 keys are rejected under FIPS mode)
What is proven
- 433 STIG checks passing
- Zero CAT I findings
- Every remaining item listed with reason and mitigation
- Evidence pack regenerated with each monthly rebuild
- Evidence pack: OpenSCAP results, DISA-format .ckl, CycloneDX SBOM, documented exceptions
How to try it free
Launch from Azure Marketplace (AWS Marketplace to follow). One month free on Azure; 30 days on AWS. The software fee is waived; the customer pays the cloud provider for the virtual machine.
Azure Government and AWS GovCloud regions planned. Private offers available for agencies and primes.
Listing coming soon — get notified
Listing not yet live at time of printing. Contact info@kapstone.systems for notification.
What it costs
from $0.04/hr
Software fee, Small instance (≤2 vCPU), in addition to the cloud VM cost. Launch range $0.04–$0.10/hr; final price set at launch. Larger instances priced per core. Clusters of 3+ discounted. Annual private offers available.
Includes monthly rebuilds, the evidence pack and next-business-day email support. Priority support and custom modifications quoted separately.