In testingStandard tier
Kapstone Hardened SFTP + Control Panel
Partner and laboratory file transfer with a control panel suitable for help-desk operation, with files landing in existing Azure or AWS storage.
from $0.15/hr
Hardened Images/Sectors/State and local
State agencies, counties, public health departments
Hardened Images for State and Local Government
For agencies that require hardened Linux hosts without a procurement cycle and without additional Linux staffing.
Requirements
The situation this sector typically faces
A formal solicitation for a small infrastructure component can take longer than the project it supports. Cloud marketplace purchases run through the cooperative or enterprise cloud agreement the state already holds and appear on the existing invoice.
Linux staffing is limited. Many agencies have a single administrator familiar with SELinux, or none. The image carries the hardening so agency staff can focus on the application.
Auditors, HIPAA privacy and security officers and the state CISO ask the same questions annually about the same hosts. A fresh evidence pack with each monthly rebuild answers them.
Baseline
Controls on every image
- AlmaLinux 9 with the DISA STIG profile applied; all exceptions documented
- FIPS mode enabled at installation; the operating system crypto policy restricts the system to FIPS 140-3 validated cryptographic modules
- SELinux in enforcing mode
- fapolicyd application allow-listing
- auditd configured with the STIG audit rule set
- Authentication by customer-supplied SSH keys only (RSA; ed25519 keys are rejected under FIPS mode)
- Monthly rebuilds with current security updates
Each release includes the evidence pack: OpenSCAP results, a DISA-format .ckl, a CycloneDX SBOM and the exceptions list. See Compliance.
Applicable images
Recommended starting points
In testingPremium tier
Kapstone Hardened OCR
Faxed case reports, paper forms and scanned records become searchable without per-page fees and without transmitting PHI to an external OCR service.
from $0.40/hr
In testingPremium tier
Kapstone Hardened FHIR Server
A FHIR R4 repository owned by the health department, for case reporting, immunization and registry workloads.
from $0.40/hr
Acquisition
Purchasing route
Available through Azure Marketplace, with AWS Marketplace to follow, under the state or cooperative cloud agreement. Marketplace spend is generally eligible toward Microsoft Azure Consumption Commitment (MACC) or AWS Enterprise Discount Program (EDP) commitments; confirm with the cloud account team. Private offers are available where a fixed annual price or written quotation is required. Free trial: one month on Azure, 30 days on AWS.
Listing coming soon. Azure Marketplace first; AWS Marketplace to follow. Azure Government and AWS GovCloud regions are planned.
Scope of claims
These images provide hardened, documented hosts toward HIPAA, IRS Publication 1075, CJIS and state security requirements. They are one layer of a compliant environment; agency policies, access control and the remaining environment also apply.
Support: best-effort next-business-day by email is included; paid priority support is available. Custom builds are consulting engagements, quoted separately.
Contact Kapstone Systems
Describe the workload and cloud environment in question. Kapstone Systems will respond with a direct assessment of whether one of these images is appropriate and, if not, what alternative is recommended.
Email: info@kapstone.systems