HeartSuite is a permission‑based execution control platform for Debian‑based Linux servers. It lets administrators define Application Permission Orders (APO) that explicitly authorize program launches and resource accesses, and its Lockdown mode blocks any unapproved process from executing or accessing files and networks, protecting against unsigned or evasive malware. The solution runs on standard x86 Debian/Ubuntu systems and can be managed remotely via SSH.
Funding
Funding not disclosed
Founders
Product
Problem
Enterprises using Linux servers lack granular control over which applications can execute and access system resources, leaving them vulnerable to malware that bypasses signature‑based detection and exploits permissive default permissions.
Solution
HeartSuite provides a permission‑based execution control platform for Debian‑based Linux systems. Administrators define Application Permission Orders (APO) that explicitly allow programs to start and, separately, to access files or remote hosts. When the Lockdown or Denial mode is enabled, any process without an approved APO is blocked from execution and from interacting with the filesystem or network, preventing unauthorized activity even if the software is unsigned or uses novel evasion techniques. The system runs on standard x86 Debian/Ubuntu servers and can be managed remotely via SSH, allowing continuous enforcement without disrupting legitimate remote administration.
Target Audience
HeartSuite is aimed at IT security teams and system administrators responsible for protecting Linux server environments in enterprises, data centers, and managed service providers.
Features
- Application Permission Orders (APO) that require explicit administrator approval for program launch and for each type of resource access (files, network, remote computers)
- Lockdown mode that enforces absolute execution and access restrictions, making evasion impossible
- Denial mode activation through a dedicated hs-monitor-state utility after initial APO seeding scripts are run
- Compatibility with any Debian or Ubuntu‑derived Linux distribution on x86 hardware
- Remote administration support, allowing secure SSH access to the HeartSuite server while maintaining protection
- Single‑file tar distribution with accompanying setup and technical documentation for straightforward installation