From 5098d149979c6d1f9f6cc4edcb847134729d1281 Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Thu, 28 Mar 2024 20:34:05 -0400 Subject: [PATCH 1/5] feat: add tools page and update action button copy --- _config.yml | 12 ++--- _includes/head.html | 3 ++ _includes/header.html | 2 +- _layouts/about.html | 2 +- _layouts/landing.html | 6 +-- _layouts/services.html | 22 +------- _layouts/tools.html | 113 +++++++++++++++++++++++++++++++++++++++++ _sass/base.scss | 2 +- contact.md | 16 +++--- tools.md | 5 ++ 10 files changed, 142 insertions(+), 41 deletions(-) create mode 100644 _layouts/tools.html create mode 100644 tools.md diff --git a/_config.yml b/_config.yml index b783b92..bee6bd2 100644 --- a/_config.yml +++ b/_config.yml @@ -21,16 +21,16 @@ title: Distrust email: lance@distrust.co description: >- # this means to ignore newlines until "baseurl:" - Trust - Nothing + Trust Nothing baseurl: "" # the subpath of your site, e.g. /blog url: "https://distrust.co" # the base hostname & protocol for your site, e.g. http://example.com header_pages: - - index.md - - about.md - - services.md - - contact.md +- index.md +- about.md +- services.md +- tools.md +- contact.md style: dark # dark (default), light or hacker listen_for_clients_preferred_style: false # false (default) or true diff --git a/_includes/head.html b/_includes/head.html index 2aa148d..9677adf 100644 --- a/_includes/head.html +++ b/_includes/head.html @@ -32,6 +32,9 @@
Services
+
+ Tools +
Contact
diff --git a/_includes/header.html b/_includes/header.html index 3eb6e62..9f07e7f 100644 --- a/_includes/header.html +++ b/_includes/header.html @@ -19,7 +19,7 @@ {%- endfor -%}
- Request a Quote + Free Consultation
@@ -134,7 +134,7 @@

Distrust offers a wide range of services which are tailored to your organization. Whether you need a complete security assessment, want to create or improve an open source security tool, or want to focus on assessing a specific aspect of your organization or system - we are here to help. Our experienced staff will collaborate closely with you to understand your unique needs and create a tailor made solution that works for you.

Learn more - Request a Quote + Free Consultation
@@ -180,7 +180,7 @@

- Request a Quote + Free Consultation {%- include footer.html -%} diff --git a/_layouts/services.html b/_layouts/services.html index a43115f..6c53c0a 100644 --- a/_layouts/services.html +++ b/_layouts/services.html @@ -15,7 +15,7 @@

How can we help you?

Distrust offers a wide range of services which are tailored to your organization. Whether you need a complete security assessment, want to create or improve an open source security tool, or want to focus on assessing a specific aspect of your organization or system - we are here to help. Our experienced staff will collaborate closely with you to understand your unique needs and create a tailor made solution that works for you.


- Request a Quote + Free Consultation
@@ -89,28 +89,10 @@
-

Research & Development

+

Research

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like so see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

-
-

Development

- - -

Research

- -
diff --git a/_layouts/tools.html b/_layouts/tools.html new file mode 100644 index 0000000..43fcfcd --- /dev/null +++ b/_layouts/tools.html @@ -0,0 +1,113 @@ + + + + +{%- include head.html -%} + + +
+ + {%- include header.html -%} + +
+
+
+
+

Tools

+

Distrust develops open source tooling to help make the internet a safer place!

+ +

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like so see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

+
+
+
+
+
+ +
+ +
+
+
+

AirgapOS

+ https://git.distrust.co/public/airgap +

A live buildroot based Linux distribution designed for managing secrets offline.

+ +
+
+
+
    +
  • Deterministic binary verification
    • +
  • Small footprint (< 100MB)
    • +
  • Immutable and diskless
    • +
  • Network drivers removed
    • +
+
+
+ +
+ +
+
+
+

Keyfork

+ https://git.distrust.co/public/keyfork +

An opinionated and modular toolchain for generating and managing a wide range of cryptographic keys offline and on smartcards from a shared bip39 mnemonic phrase..

+
+
+
+
    +
  • BIP39 style key derivation from OS or hardware entropy
    • +
  • Sharding mechanism allows "M-of-N" recovery
    • +
  • Built deterministically
    • +
  • Intended for use with air-gapped systems
    • +
+
+
+ +
+ +
+
+
+

StageX

+ https://codeberg.org/stagex/stagex +

Minimalism and security first repository of reproducible and multi-signed OCI images of common open source software toolchains full-source bootstrapped from Stage 0 all the way up.

+
+
+
+
    +
  • Fully verifiable and deterministic build toolchain
    • +
  • Deterministic packages of commonly used software (rust, go, openssl, curl and many more)
    • +
  • Flexible drop in replacement for existing software
    • +
  • Available on [dockerhub](https://hub.docker.com/u/stagex)
    • +
+
+
+ +
+ +
+
+
+

EnclaveOS

+ https://git.distrust.co/public/enclaveos +

A minimal, immutable, and deterministic Linux unikernel build system targeting various Trusted Execution Environments for use cases that require high security and accountability.

+
+
+
+
    +
  • Immutable: Root filesystem is a CPIO filesystem extracted to a RamFS at boot
    • +
  • Minimal: < 5MB footprint and nothing is included but a kernel and your target binary by default
    • +
  • Deterministic: multiple people can reproduce the build and verify its integrity
    • +
  • Hardened: No TCP/IP network support, most unnecessary kernel features disabled and follows [Kernel Self Protection Project](https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project) recommendations
    • +
+
+
+
+ + {%- include footer.html -%} + +
+ + + \ No newline at end of file diff --git a/_sass/base.scss b/_sass/base.scss index c5b790a..585ee36 100644 --- a/_sass/base.scss +++ b/_sass/base.scss @@ -71,7 +71,7 @@ hr { margin-top: 20px; } .header-page-links a { margin: 0px 15px; - font-size: 1.3rem; + font-size: 1.1rem; text-decoration: none; } diff --git a/contact.md b/contact.md index f923744..29e37a1 100644 --- a/contact.md +++ b/contact.md @@ -4,18 +4,16 @@ layout: home permalink: /contact.html --- +Send an email to `sales@distrust.co` to schedule a free introductory consultation. + +## Emails + +- [sales@distrust.co](mailto:sales@distrust.co) +- [team@distrust.co](mailto:team@distrust.co) + ## Team - Lance Vick \<[lance@distrust.co](mailto:lance@distrust.co)\> [6B61 ECD7 6088 748C 7059 0D55 E90A 4013 36C8 AAA9](https://keys.openpgp.org/vks/v1/by-fingerprint/6B61ECD76088748C70590D55E90A401336C8AAA9) - Ryan Heywood \<[ryan@distrust.co](mailto:ryan@distrust.co)\> [8882 3A75 ECAA 786B 0FF3 8B14 8E40 1478 A3FB EF72](https://keys.openpgp.org/vks/v1/by-fingerprint/88823A75ECAA786B0FF38B148E401478A3FBEF72) - Anton Livaja \<[anton@distrust.co](mailto:anton@distrust.co)\> [F4BF 5C81 EC78 A5DD 341C 91EE DC4B 7D1F 52E0 BA4D](https://keys.openpgp.org/vks/v1/by-fingerprint/F4BF5C81EC78A5DD341C91EEDC4B7D1F52E0BA4D) - Shane Engelman \<[shane@distrust.co](mailto:shane@distrust.co)\> [3D7C 8D39 E8C4 DF77 1583 D3F0 A8A0 91FD 3460 01CA](https://keys.openpgp.org/vks/v1/by-fingerprint/3D7C8D39E8C4DF771583D3F0A8A091FD346001CA) - -## Sales - -- [sales@distrust.co](mailto:sales@distrust.co) - - -## General - -- [team@distrust.co](mailto:team@distrust.co) diff --git a/tools.md b/tools.md new file mode 100644 index 0000000..fee9953 --- /dev/null +++ b/tools.md @@ -0,0 +1,5 @@ +--- +title: Tools +layout: tools +permalink: /tools.html +--- \ No newline at end of file -- 2.40.1 From fb5e84ecafadf9b19379f0fc92c289bf47ea6dd0 Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Thu, 28 Mar 2024 20:50:34 -0400 Subject: [PATCH 2/5] fix: typo --- _layouts/landing.html | 2 +- _layouts/services.html | 2 +- _layouts/tools.html | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/_layouts/landing.html b/_layouts/landing.html index 74f337a..bc92377 100644 --- a/_layouts/landing.html +++ b/_layouts/landing.html @@ -178,7 +178,7 @@

Research & Development

-

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique situations. If we are doing public work you would like so see more of, or that -almost- meets your needs, we would love to hear that and figure out a path to see your needs met.

+

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique situations. If we are doing public work you would like to see more of, or that -almost- meets your needs, we would love to hear that and figure out a path to see your needs met.

diff --git a/_layouts/services.html b/_layouts/services.html index 6c53c0a..3740e83 100644 --- a/_layouts/services.html +++ b/_layouts/services.html @@ -90,7 +90,7 @@

Research

-

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like so see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

+

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like to see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

diff --git a/_layouts/tools.html b/_layouts/tools.html index 43fcfcd..6ed490b 100644 --- a/_layouts/tools.html +++ b/_layouts/tools.html @@ -16,7 +16,7 @@

Tools

Distrust develops open source tooling to help make the internet a safer place!

-

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like so see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

+

Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like to see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

-- 2.40.1 From 4e3b0154f7958c537417ba82b2e3b1605006140a Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Thu, 28 Mar 2024 20:56:01 -0400 Subject: [PATCH 3/5] fix: links --- _layouts/tools.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_layouts/tools.html b/_layouts/tools.html index 6ed490b..3b882d9 100644 --- a/_layouts/tools.html +++ b/_layouts/tools.html @@ -79,7 +79,7 @@
  • Fully verifiable and deterministic build toolchain
  • Deterministic packages of commonly used software (rust, go, openssl, curl and many more)
  • Flexible drop in replacement for existing software
    • -
  • Available on [dockerhub](https://hub.docker.com/u/stagex)
    • +
  • Available on dockerhub
    • @@ -99,7 +99,7 @@
  • Immutable: Root filesystem is a CPIO filesystem extracted to a RamFS at boot
  • Minimal: < 5MB footprint and nothing is included but a kernel and your target binary by default
  • Deterministic: multiple people can reproduce the build and verify its integrity
    • -
  • Hardened: No TCP/IP network support, most unnecessary kernel features disabled and follows [Kernel Self Protection Project](https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project) recommendations
    • +
  • Hardened: No TCP/IP network support, most unnecessary kernel features disabled and follows Kernel Self Protection Project recommendations
    • -- 2.40.1 From 63188df2a9e1a393155f61238c3eb7464d4666ee Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Thu, 28 Mar 2024 22:04:36 -0400 Subject: [PATCH 4/5] fix: whitespaces begone --- _includes/head.html | 2 +- _includes/header.html | 2 +- _layouts/landing.html | 16 ++++++++-------- _layouts/services.html | 4 ++-- _layouts/tools.html | 2 +- _sass/base.scss | 4 ++-- 6 files changed, 15 insertions(+), 15 deletions(-) diff --git a/_includes/head.html b/_includes/head.html index 9677adf..04951be 100644 --- a/_includes/head.html +++ b/_includes/head.html @@ -16,7 +16,7 @@ - + diff --git a/_includes/header.html b/_includes/header.html index 9f07e7f..8a900e8 100644 --- a/_includes/header.html +++ b/_includes/header.html @@ -25,7 +25,7 @@ + diff --git a/_layouts/landing.html b/_layouts/landing.html index bc92377..53c7c0b 100644 --- a/_layouts/landing.html +++ b/_layouts/landing.html @@ -39,7 +39,7 @@
    -
    +
    -
    +
    @@ -148,7 +148,7 @@

    - +

    Security Assessment

    We offer full stack security assessments, covering anything that is in scope for a sophisticated adversary, such as compromising a third party library, bribing a devops engineer, finding a oversight in your code, or otherwise. While we will point out specific flaws we find, we feel we offer the most value in helping you identify where you can make strategic improvements to your architecture to take entire classes of risk off the table.

    @@ -157,25 +157,25 @@

    - +

    Security Engineering

    Our team is comprised of security engineers with past lives as full time system administrators and software engineers. We have extensive first hand experience in implementing custom security defenses for high risk organizations. We are happy to get as deep into the weeds planning new defense strategies as you like, from Linux kernel hardening, to supply chain signing, to code quality, library choices, and beyond.

    - +

    - +

    Retained Security Support

    We offer monthly retainer contracts to augment your existing security team with access to our combined experience as needed. You can drop questions to our team in a chat, or include us in security-relevant meetings. Almost anything an in-house security team might do to protect your organization is in scope for us as well, including qualifying candidates, conducting interviews, reviewing code, evaluating third party risks, or being a security voice in the room when you are planning new products.

    - +

    - +

    Research & Development

    Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique situations. If we are doing public work you would like to see more of, or that -almost- meets your needs, we would love to hear that and figure out a path to see your needs met.

    diff --git a/_layouts/services.html b/_layouts/services.html index 3740e83..70bcc72 100644 --- a/_layouts/services.html +++ b/_layouts/services.html @@ -83,13 +83,13 @@
    - +
    -

    Research

    +

    Research

    Rather than write the same document or tool 10 times and bill each client for it, we focus our unused retainer hours on open sourcing every document and tool we legally can, so we can focus our time with clients on their unique needs. If we are doing public work you would like to see more of, or that almost meets your needs, we would love to hear from you and figure out a path to see your needs met.

    diff --git a/_layouts/tools.html b/_layouts/tools.html index 3b882d9..905052f 100644 --- a/_layouts/tools.html +++ b/_layouts/tools.html @@ -83,7 +83,7 @@
    - +
    diff --git a/_sass/base.scss b/_sass/base.scss index 8931a87..145bff3 100644 --- a/_sass/base.scss +++ b/_sass/base.scss @@ -158,7 +158,7 @@ hr { .header-page-links a { margin: 0px 15px; font-size: 1.1rem; - text-decoration: none; + text-decoration: none; } .header-page-links a:hover { @@ -833,7 +833,7 @@ pre { /** - * Carousel + * Carousel */ .carousel-container { -- 2.40.1 From 5715c2cdcf7d148e46288fc8e17eccc1e2d72d8c Mon Sep 17 00:00:00 2001 From: ryan Date: Thu, 28 Mar 2024 22:30:35 -0400 Subject: [PATCH 5/5] fix margin and padding --- _includes/header.html | 8 ++++---- _sass/base.scss | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/_includes/header.html b/_includes/header.html index 8a900e8..954c37d 100644 --- a/_includes/header.html +++ b/_includes/header.html @@ -17,10 +17,10 @@ {%- endif -%} {%- endif -%} {%- endfor -%} +
  • + Free Consultation +
    • -
    - Free Consultation -
    - \ No newline at end of file + diff --git a/_sass/base.scss b/_sass/base.scss index 145bff3..f88afc9 100644 --- a/_sass/base.scss +++ b/_sass/base.scss @@ -156,7 +156,7 @@ hr { } .header-page-links a { - margin: 0px 15px; + margin: 0px 4px; font-size: 1.1rem; text-decoration: none; } @@ -337,7 +337,7 @@ hr { .right-menu>ul>li:before { content: "" !important; - margin-right: 9px; + margin-right: 4px; } @@ -953,4 +953,4 @@ body { padding-top: 50px; padding-left: 10px; } -} \ No newline at end of file +} -- 2.40.1