Skip to content

claude code: /plugin install agentmon-live --marketplace codenotary/agentmon-live

Linux fleet security

Your fleet. Your rules.
Under control.

Find exploitable vulnerabilities. Harden Linux configurations. Review the changes that matter, with the evidence ready for your next audit.

Protect your first 5 hosts Explore the workflow

5 hosts free · No credit card · No kernel modules

Codenotary Trust / Autonomous SecurityProduct screenshot
Autonomous Security fleet overview showing applied changes, update queues and items needing an administrator
The fleet, in one view. Applied changes, update queues and the systems that need you. Screenshot contains test-environment data.
  1. 01See what changed
  2. 02Review what needs you
  3. 03Track the result

Across your Linux estate

Ubuntu · Debian · RHEL · AlmaLinux · Rocky Linux · SUSE · Amazon Linux

From finding to verified change

Less noise. A clear next action.

Start with the fleet. Narrow the findings. Review a fix. Keep a record of what changed.

Exploit context. Not just another CVSS list.

See which findings have public exploit code or offensive tooling, then identify the package version that closes the vulnerability.

  • Kernel and userspace CVE inventory
  • Exploit-aware filtering
  • Fixed package versions in context
Patch prioritiesIllustrative data
PackageExploit contextNext action
opensslPublic exploitReview update
linux-imageOffensive toolingReview fixed version
curlNo exploit signal shownAssess priority

Next release · Built for production reality

Patch the host. Respect the containers.

Container hosts need a different patching decision. The upcoming release holds back kernel and container-engine updates from automatic rules and updates across systems.

Other updates can continue. An administrator can explicitly approve a held-back update on one system after a warning.

Container-aware update flowPreview
k8s-worker-01Containers detected · illustrative host
Other OS packages

Continue under the enabled update rule.

Rule-based updates
Kernel + container engine

Hold back. Warn before a manual update on this host.

Explicit admin choice

Detection uncertain? Treat the host as running containers.

01 / Problems & investigation

Connect the error to the change.

Correlate journald, apt and dnf problems with preceding package, kernel, service or configuration changes. AI proposes investigation steps; a person reviews and applies fixes.

Package changeNew errorInvestigate

02 / Groups & schedules

Staging tonight. Production Sunday.

Group systems by environment or role. Set schedules per group and rule, in the administrator’s time zone. All autonomous rules start off.

staging / nightlyproduction / Sunday

Illustrative schedule; groups have independent rules, not an automatic promotion pipeline.

One workspace. Three ways to act.

From fleet operations to the underlying risk.

Move between Autonomous Security, Linux Patch Management and Linux Compliance, with a clear starting point for each job.

Codenotary Trust / WorkspaceProduct screenshot
Trust workspace showing Autonomous Security, Linux Patch Management and Linux Compliance modules
Choose the work, not another tool. The product workspace brings operational changes, CVE findings and CIS checks together. Values shown are test-environment data.

Start with five hosts. See what needs attention.

Get a view of vulnerabilities and hardening findings across your Linux estate.

Start free

First five hosts free. Next-release items are previews.