Keysas
Keysas is a modern decontamination station prototype, fast, which aims to be secure.
It provides an easy solution to verify or transfer your documents. It can be used as a standalone “decontamination station” or act as a gateway to transfert untrusted files to higher security level networks. Untrusted files are scanned by an antivirus and you can manage and create your own Yara rules and add them easily to Keysas in order to inspect your files with more efficiency. You can also create a whitelist of file types you want to transfert based on their magic number to filter more accurately.
Security
This software has been intentionally made to be as secure as possible using Rust programming langage, Secure Computing mode 2, strong sandboxing through systemd namespaces, LandLock and Apparmor. However if you encounter any security issue, do not hesitate to contact us via Github.
This code has undergone a security audit conducted by Amossys an external company specialized in cybersecurity. Since this audit, all security patches have been applied to the current v2.5. See SECURITY.md on the github repository for more information.
Keysas can be installed on Debian 12 (Bookworm) or Debian 13 (Trixie) systems.
This software is mostly written in Rust, under GPL-3.0 license.
Learn more and contribute on Github.