Kangasec Secure Open Source
Most security solutions weren't built for your world.
The cybersecurity market is crowded, fragmented & overwhelmingly Windows-first. The majority of commercial security tools were designed for closed, proprietary environments & Linux support is often limited, incomplete, or simply bolted on as an afterthought.
Yet Linux powers over 90% of production and cloud environments today.
The result? Blind spots in your most critical systems. False confidence in tools that don't truly understand your infrastructure. And a growing dependency on black-box solutions from vendors you can't fully trust or control.
There's also a geopolitical dimension that's easy to overlook. Most security vendors are non-EU-based. Kaspersky was banned for US government use in 2017, then nationwide in 2024. The question worth asking today: what happens to your organisation if Europe introduces similar rules against non-EU security vendors? If you run supply chain risk assessments, as required by NIS2, you may already know the answer.
Full operational security for Linux & Open Source environments
Care-free security services
Who is Kangaroot?
Kangaroot has designed, implemented & supported Linux and open source infrastructures since 2000. Kangarun is our managed services brand; it takes over daily operations, monitoring & 24/7 support so you can focus elsewhere. Kangasec is our open source security practice; built specifically for Linux, where most security tooling still falls short. Same team, three ways to work with us.
The problem with traditional security
-
No transparency
Proprietary black boxes with no insight into what they actually do.
-
Vendor lock-in
SaaS-only, non-sovereign. If the portal goes down, your security goes down.
-
Linux as afterthought
Windows-first tools glued onto Linux. Blind spots in your most critical systems.
-
Geopolitical risk
Non-EU-based vendors. One regulatory decision away from being unusable.
What we offer
-
SIEM & monitoring
Continuous visibility into your Linux environment. MITRE ATT&CK aligned. Reference design* using Elastic.
* Alternative designs possible. Get in touch for more info.
-
WAF & intrusion detection
Coraza WAF, Falco, Zeek & Suricata. Host & network-based coverage.
-
Hardening & compliance
CIS/STIG hardening, OpenSCAP, binary whitelisting (fapolicyd).
Ensure your systems are hardened to support compliance with ISO 27001, NIS2, DORA and CRA.
-
Container & Kubernetes
StackRox/RHACS & Falco for runtime security & network segmentation.
-
Identity & secrets
Keycloak, OpenBao, Hashicorp Vault, short-lived SSH certificates. No standing credentials. Internal PKI for encryption in transit.
-
Incident response
24/7 on-call, forensic analysis, postmortem & management report.
-
Secure development
SonarQube, Zed Attack Proxy, OWASP Dependency-Track, DefectDojo, Renovate Bot.
-
Automated
With the help of Ansible, fully automated infrastructure-as-code.
What you get
-
Care-free managed service
We handle the complexity. You keep the control.
-
Interpretation & advice
Not just alerts, monthly reports that explain what’s happening.
-
Rapid incident response
24/7 on-call, clear communication, postmortem analysis.
-
Beyond the checkbox
Security that actually works, not just ISO audit compliance.
Open Source Security Scan
Kangasec closes the blind spot
IT Insights wrote a great piece about Kangaroot's security offering Kangasec at Cybersec Europe & the core message is actually simple: even large service providers lack adequate tooling & expertise for Linux when incidents occur.
While 90% of production workloads run exactly there. KangaSec closes that blind spot, bringing together open source tools into one manageable whole. Transparent, sovereign, vendor-neutral. Running in your environment, not in that of a US cloud provider.
Because security without transparency and control isn’t security. It’s a checkbox.
Frequently Asked Questions
-
What does a managed security service for Linux do?
Kangasec monitors, detects & responds to threats in your Linux & Kubernetes/OpenShift environments around the clock. Unlike most security tools, which are built for Windows first, Kangasec is built entirely on open source & designed for Linux from the ground up.
-
Why do most security tools fall short on Linux?
90% of production workloads run on Linux, yet most commercial security tooling was originally built for Windows. That gap in coverage & expertise is exactly what Kangasec closes.
-
What's included in Kangasec's RHACS Operations Service?
Round-the-clock coverage across Kubernetes & OpenShift, active CVE identification & patching coordination, policy tuning, behavioral anomaly monitoring & container escape detection, plus audit-ready CIS benchmark reports. Transparent pricing, no hidden fees, from 3 nodes minimum.
-
Is Kangasec a replacement for our existing security tools, or an addition?
It depends on your setup. Kangasec is built to close the Linux-specific blind spot; for some clients that replaces existing tooling, for others it complements what's already in place. We assess your environment first.