Product
MDM for Linux operators.
LodeStar is multi-tenant SaaS device management. Ubuntu and Linux first. Agent, policy, live query, inventory — then CVE/KEV from what is actually installed.
Path
Host. Agent. Tenant. Operate.
01
Ubuntu host
Desktop or server. The machine you already run.
02
lodestard
Agent on the box. Inventory up. Policy down.
03
Your tenant
One fleet. Operators see their devices — not a shared junk drawer.
04
Operate
Policy. Live query. CVE and KEV from what is installed.
See how it works
A short path. No mystery layer.
- 01
Agent on the device
The device agent runs on the Linux host, reports inventory, and applies policy. That is the control plane on the box.
- 02
Tenant in the SaaS
Each customer is a tenant. Operators see their fleet, not a shared junk drawer. Multi-tenant from the start — not a single-customer appliance with a coat of paint.
- 03
Policy and live query
Write policy for how the machine should look. Live query asks what is true now. Those are different jobs. LodeStar keeps them that way.
- 04
Inventory, then exposure
CVE and KEV views are derived from inventory. If it is not on the box, it is not in the exposure list. No separate scanner-product story.
- 05
Snaps from Canonical
Need a snap? It comes from Canonical’s store. LodeStar does not host snaps and does not pretend to be an app repository.
Policy catalog
Controls that talk about the machine the way you already do.
- Screen lock
- UFW firewall
- USB mass-storage
- Wallpaper & dock
- Linux accounts
- Ubuntu Pro
- Unattended upgrades
- Network
Plus patch campaigns, compliance rules, smart groups, SCIM / OIDC, SIEM webhooks, and an audit log. Linux is the point. Read Linux and Security for the rest of the argument.
Request access.
Email goes to Method Tech. No payment form on this site.