// Products

The Linne Suite

One on-premises compliance suite for CMMC and RMF enclaves: evidence, assessment, documentation, crypto posture, continuous monitoring and air-gap patching in one interface. It installs on your own STIG'd RHEL 9 host from an offline signed repository, so nothing leaves the enclave.

Build your suite Need RMF support instead?

// Profiles

Install What You Need, Nothing Else

Each part is its own signed package. What you do not install is not on the host, so it stays out of your software inventory and your ISSM's review. Pick your pieces

// CMMC

Linne for CMMC

Core, Evidence & Assessment, Documentation, Crypto Posture and Continuous Monitoring for an on-premises CUI enclave: 320 objectives, SPRS score, POA&M and SSP from live evidence.

// RMF

Linne for RMF

Everything in the CMMC profile, plus STIG checklists mapped through CCI to NIST SP 800-53 and Air-gap Patching for classified and disconnected systems.

// Add-on

Remediation

Applies the fixes and STIG settings the assessment finds, behind an approval screen, with every run in the audit log. Buy it, or have Linne Consulting do the work.

// Status

In Development

The Linne Suite is being built now. Early-access customers help shape it; contact us to talk about your enclave and timing.

// Build Your Suite

Pick The Pieces You Need

Check what your enclave needs, or start from a profile. Each piece says what it does and when you would want it. All of it is in development; Core, Evidence & Assessment and Remediation come first, since most of that code already exists.

Start from:

// Every install Core Asset inventory, evidence store, logins and roles, audit log, reports and an offline license. The base every plug-in sits on. Pick it if: always included. // CMMC and RMF Evidence & Assessment Collects evidence over SSH. CMMC: all 320 objectives, SPRS score and POA&M. RMF: STIG checklists mapped through CCI to NIST SP 800-53, plus SCC and ACAS/Nessus imports. Pick it if: you need to know where you stand, or need a SPRS score you can defend. // CMMC and RMF Documentation SSP, POA&M, policies and incident response plan built from the evidence in the suite, not from a questionnaire. Pick it if: your SSP is missing, stale, or doesn't match the systems. Needs Evidence & Assessment. // Add-on Remediation Applies fixes and STIG settings behind an approval screen, with optional two-person approval and every run in the audit log. Pick it if: your own team will do the hardening. Leave it off and Linne Consulting can do the work instead. // CMMC and RMF Crypto Posture Checks FIPS mode and validated modules against the CMVP list, catches drift after patching, and builds the post-quantum crypto inventory (CBOM) for the CNSA 2.0 dates. Pick it if: you protect CUI with encryption (3.13.11) or face CNSA 2.0 deadlines. Needs Evidence & Assessment. // CMMC and RMF Continuous Monitoring Scheduled re-scans, drift alerts, POA&M aging, a monthly status report and the annual affirmation package. Pick it if: you have to stay compliant after the assessment, not just pass it once. Needs Evidence & Assessment. // RMF Air-gap Patching Signed update bundles carried from the low side to the high side, verified before import, with chain-of-custody records filled in. Includes AV signature, SCAP/STIG content and vulnerability database feeds. The longest build, planned for the third release. Pick it if: the enclave has no network path out, as in classified or disconnected systems.

Your selection

Core

Name

Work email

Company

Hosts in scope

Network

Anything else

Pricing is quoted per deployment.

Thanks. Your selection reached Steven; he will reply by email.

// Built To Be Approved

Designed For The Host Your ISSM Already Authorized

The Linne Suite goes through your change control as a software addition, not a new system.

Your OS, Unchanged

Runs on a STIG'd RHEL 9 host with FIPS mode on and SELinux and fapolicyd enforcing, with no deviations. Each release will ship a before-and-after SCAP scan of the host.

Validated Crypto Only

All cryptography goes through RHEL's FIPS 140-3 validated OpenSSL (CMVP certificate #4857). No bundled crypto libraries, nothing installed from pip.

Offline, No Agents

Delivered as signed RPMs in an offline repository. Collects over SSH; nothing is installed on the systems it assesses, and it makes no outbound connections.

Evidence You Can Defend

Logins through the host's own PAM setup, with Kerberos and CAC/PIV to follow, and a tamper-evident audit log that also goes to syslog and auditd.

// Questions

The Linne Suite, Answered

What is the Linne Suite?

The Linne Suite is on-premises compliance software for CMMC and RMF enclaves, built by Linne Consulting. It brings evidence collection, assessment, documentation (SSP and POA&M), crypto posture, continuous monitoring and air-gap patching into one interface, installed on your own STIG'd RHEL 9 host. It is in development now; early-access customers help shape it.

Does the Linne Suite send data outside the enclave?

No. It is delivered as signed RPMs from an offline repository, collects evidence over SSH with no agents on the systems it assesses, and makes no outbound connections.

What does the Linne Suite do for CMMC Level 2?

It assesses all 320 NIST SP 800-171A objectives from collected evidence, calculates your SPRS score, and builds the POA&M and SSP from that evidence. Continuous Monitoring re-scans on a schedule, alerts on drift, ages POA&M items and builds the annual affirmation package.

Is it built for classified or air-gapped systems?

Yes. The RMF profile maps STIG checklists through CCI to NIST SP 800-53 and imports SCC and ACAS/Nessus results. Air-gap Patching carries signed update bundles from the low side to the high side, verified before import, with chain-of-custody records filled in; it is planned for the third release.

Is the cryptography FIPS validated?

All cryptography goes through RHEL's FIPS 140-3 validated OpenSSL (CMVP certificate #4857), with no bundled crypto libraries. The Crypto Posture piece checks FIPS mode and validated modules across your systems and builds the post-quantum crypto inventory (CBOM) for the CNSA 2.0 dates.

How much does the Linne Suite cost?

Pricing is quoted per deployment, based on the hosts in scope and the pieces you install. Use the selector on this page to send your selection, and Steven Linne will reply by email.

Can Linne Consulting do the work instead of my team?

Yes. Linne Consulting offers CMMC, NIST 800-171 and RMF/ATO consulting. Leave the Remediation add-on off and Linne Consulting can do the hardening and remediation for you.

Interested In The Linne Suite?

Tell Steven about your enclave: CMMC or RMF, how many hosts, and whether it is connected. Pricing is quoted per deployment.

Pick your pieces Or just contact us