Sextant: open source fleet management for Linux workplaces
Setting up one laptop is not hard. Keeping hundreds of laptops identical, keeping them secure and being able to show what runs on them is. That is why we develop Sextant: open source fleet management for Linux workplaces.
The problem
- Managing laptops at scale, without manual work per device.
- Being able to show what runs on every laptop, for audits and NIS2.
- Rolling out updates without one mistake hitting the whole fleet.
How Sextant works
One document for the whole fleet. One document describes what every laptop installs. Nobody changes a laptop by hand.
Test first, then roll out. Every change is built and tested first. It then goes to a few machines, and only when all goes well to the rest.
See what really runs. The console shows what every laptop really runs, down to the version.
Always able to go back. Machines are reproducible, so rolling back is always possible. A new laptop is ready in one go.
Fits your existing environment
Sextant works with systems you may already use, such as logging in via the directory, Netbird, Wazuh and OpenBao. You run it on your own infrastructure or at a partner.
Evidence for ISO 27001 and NIS2
For an audit you do not just want to say your laptops are secure. You want to be able to show it. Sextant provides evidence per control for ISO 27001 and NIS2.
Open source, under the EUPL 1.2
Sextant is part of the DAWO community and is used, among other things, for the DAWO workplace. BB Open wrote most of the code and runs the release and security process. The software is free to use under the EUPL 1.2. We provide hosting, implementation and support on top.
Want to know more? See Sextant in our portfolio, visit sextantfleet.org or get in touch.