$ cirven --about
cirven systems: defense modules for linux developer workstations.
your laptop holds ssh keys, cloud credentials and tokens to
everything you ship. it deserves better than a default install.

modules

name	does	status
audit	find weaknesses, rank them by real attack paths	experimental
harden	fix findings: preview, apply, roll back	experimental
watch	detect persistence: new units, autostarts, hooks	experimental
lure	decoy credentials that alarm when touched	experimental
pkg	inspect AUR and npm packages before install	experimental
cage	sandbox tools and AI agents to what they need	experimental
key	hardware key + password; unplug and it all locks	planned

install

$ cargo install --locked --git https://github.com/Artaeon/cirven cirven
$ cirven audit

linux only. rust 1.85+. experimental: read the threat model of a module before you rely on it.

principles

local first. works offline. no account required.
no telemetry. ever.
every change is shown before it happens and can be undone.
every module ships a threat model: what it stops, and what it does not.
least privilege: root only where the kernel demands it.
signed releases, reproducible builds.

license & price

code	open source, Apache-2.0. all modules. free. github.com/Artaeon/cirven
paid	later, optional: cirven relay, hosted alerting for lure, signed package-intel feed for pkg, fleet overview for teams. self-hosting stays possible.
price	none yet. nothing gets sold before it works.

security software you cannot read is security software you have to trust. we would rather be checked.

roadmap

[x] audit + harden   know and fix your own machine
[x] watch + lure     notice when someone gets in
[x] pkg  + cage      stop it before it runs
[ ] key              tie it all to hardware
[ ] relay            alerts and feeds that need a server

contact

security issues: security@cirven.dev (security.txt)