GitHub ↗
Independent engineering company

Infrastructure-grade open source.

We design and maintain security infrastructure and developer tools: eBPF threat detection, post-quantum cryptography and a self-hosted programming language. Open-source core, enterprise-grade engineering discipline.

Explore products Read the documentation
10
Public products
3
Container images on GHCR
48h
Security response SLA
400+
Tests in Externum suite
Flagship

talus-process-monitor

Behavioral ransomware detection and response for Linux. eBPF-based, ~280k events per second, seccomp and Landlock self-sandboxing, one static binary — no kernel modules.

pip install talus-process-monitor
docker pull ghcr.io/hartwell-labs/talus-process-monitor:latest
Deployment guide Source ↗
How we ship

Engineering practices, not promises.

Every repository in the organization runs the same quality gates. The flagship additionally ships with supply-chain evidence.

CI on every push

Builds, linters and test suites run on all active repositories. A feature without CI does not ship.

Static analysis & fuzzing

CodeQL across the org; continuous fuzzing on talus' eBPF pipeline.

Signed releases

Release artifacts ship with build provenance and Sigstore-style attestation.

SBOM included

Every talus release carries an SPDX software bill of materials — know exactly what you deploy.

OpenSSF Scorecard

Supply-chain posture measured continuously, not advertised in slide decks.

Coordinated disclosure

48-hour acknowledgment SLA, public hardening notes, Hall of Fame for reporters.

Build on Hartwell, or against it.

Use the products, read the source, or try to break them — we pay attention to all three.

About the company Report a vulnerability