How it works

Command post, agent and app

The command post runs on one of your servers, a small agent on every further server. You work with all of it in the app or in the command post’s web interface.

Everything runs where you are

The app connects to your command post, the agents report to it. No service of ours sits in between.

App or browsermacOS, Windows, Linux or the command post’s web interface

ConnectedProxmox, Docker, Coolify, Dokploy, Portainer, Kubernetes

Command postOn your Linux server, with its database and vulnerability data

Licence serviceOnly the key for the check, fetching vulnerability data and updates

AgentLinux

AgentmacOS

AgentWindows

AgentLinux

ConnectedProxmox, Docker, Coolify, Dokploy, Portainer, Kubernetes

Licence serviceOnly the key for the check, fetching vulnerability data and updates

State, packages, logs and findings run from the agents into the command post, and the app reads them there.

What the command post sends out

Once a day its licence key for the check, with nothing about servers or people
Requests for new vulnerability data and its own updates
Notifications, AI and integrations only when you set them up

Set up in three steps

The commands are the same ones the app shows.

Set up the command post
On a Linux server, with root rights. The installer sets up Docker if needed, starts the command post and finally shows its address and a pairing code.
On the command post’s server
$curl -fsSL https://license.m8werk.de/get/phalanx | sudo sh
Connect the app
Enter the command post’s address and the pairing code in the app. The code works once and for 24 hours. Then you create your account and are the command post’s admin.
Add servers
Under “Add server” the app shows a short command for Linux, macOS or Windows. For Linux and macOS servers the app can also run it over SSH.
On every further server, address and code from the app
$curl -fsSL https://license.m8werk.de/get/phalanx | sh -s -- join <address> <code>

What the command post needs

Linux on x86_64 or aarch64
At least 1 GB of memory, 2 GB recommended
At least 5 GB of free disk space
Port 8443, which you can change when setting up

Your data

Phalanx is built so that customer data never lies with us.

Stored with you

Inventory, findings, logs and history live in your command post’s database, in one directory on your server.

Only the key goes out

Once a day the command post checks its licence key. Only the key goes to the licence service, nothing about servers or people.

Without internet too

Without a connection the command post keeps working. You then bring in new vulnerability data as a file.