Arcturiq decides whether each server, endpoint and service is affected by a vulnerability, proves each fix by the file that is actually running, and shows the evidence behind every decision. Where it could not look, it says so.
Requirements: the sensor’s host is Linux on amd64 or arm64, with systemd. Downloads you can check: the sensor and the agents come from one constant link, signed, with a fingerprint published apart from the service.
There is positive evidence that this machine or service is affected.
The evidence shows it is not: a valid negative, never an absence of data.
A capable method looked but could not decide.
No capable method covered this machine or service.
The affected software cannot exist on this kind of machine.
How old the evidence is shows beside each decision. It is never an outcome.
| Device | Status | Kind | Status Reason | Installed | Running |
|---|---|---|---|---|---|
| web-01sshd · port 22 | AffectedNeeds restart | Server | Needs restart | 3.0.13 | 3.0.11 |
| laptop-07libssl3 package | Not affectedFixed version installed | Endpoint | Fixed version installed | 3.0.13 | – |
| db-02192.0.2.27 | Not checkedDevice did not answer | Server | Device did not answer | – | – |
A fix counts only when the file a service is running is the fixed one.
Nothing is reported clean without evidence. A device that stops reporting reads Not checked, not clean.
When advisory data changes, decisions are made again without waiting for the next scan.
Servers and endpoints are decided the same way, from the same kind of evidence.
Reads vendors’ VEX and CSAF “not affected” statements, and shows which one a decision rests on.
From the internet, to a service, to the vulnerable package.
It explains a decision from its stored evidence. It never makes one.
We will publish how accurately Arcturiq decides, and how that is measured.
One sensor runs in each network zone, on a Linux host you provide.
A small kit installed once gives it a restricted login and a fixed list of commands.
An efficient agent on each Windows or Linux laptop or desktop, and on Windows servers.
It looks only at its own device and connects outbound, so it works wherever the device is.
Every result is signed before it leaves the sensor or the device.
Every vulnerability, on every server, endpoint and service, gets a decision.
Each decision shows its reason and the evidence behind it.
Email us to hear when Arcturiq launches, or to talk about your servers and endpoints.