What You Get Out of the Box

Security and compliance work your team would otherwise spend days doing - already done.

How We Build and Maintain Every Image

Hardening is not a one-time step. Each image is built, scanned, monitored and rebuilt on a schedule so it stays production-safe after you deploy.

Backed by Expert Support

Every image comes with expert support and a 24-hour response target. Deployment questions, configuration help, or a security concern - reach us any time.

Our Story

Lynxroute started with a recurring problem across organizations: making VMs production-safe. CIS hardening, CVE scanning, firewall setup, secret rotation - the same careful work, repeated from scratch every time.

We decided to do that work once, properly, and make the result available to everyone through the AWS, Azure and Alibaba Cloud marketplaces.

Our Mission

To make security-hardened open source software available to any team on AWS, Azure and Alibaba Cloud - without the days of configuration work it normally takes to get there. Every image we publish ships with CIS Level 1 hardening, CVE scanning, a CycloneDX SBOM, and a CIS Conformance Report included.

Short version: Lynxroute does not collect, store, or process personal data. We publish hardened virtual machine images on cloud marketplaces. Once you deploy one of our images, it runs entirely within your own cloud infrastructure - Lynxroute has no visibility into your instance, your data, or your usage.

About Lynxroute

Lynxroute is a software publisher that builds and distributes hardened virtual machine images for cloud marketplaces, including AWS Marketplace, Azure Marketplace and Alibaba Cloud Marketplace. Our products are pre-configured, security-hardened Ubuntu 24.04 LTS VM images designed for self-hosted deployment.

We do not operate a SaaS platform, subscription service, or hosted product. We do not have access to any infrastructure you deploy.

What We Do Not Collect

Lynxroute does not collect any personal data. Specifically:

• →We do not collect names, email addresses, or contact information through our VM images.
• →We do not log, track, or monitor your cloud instances after deployment.
• →Our VM images do not include telemetry, analytics, or any call-home functionality.
• →We do not process payment information - all billing is handled exclusively by the marketplace (AWS, Azure or Alibaba Cloud) on your behalf.
• →We do not use cookies, trackers, or fingerprinting on this website beyond what is described below.

This Website

The Lynxroute website is a static informational site. We do not run analytics, advertising networks, or tracking scripts. Standard web server access logs (IP address, request path, timestamp) may be retained temporarily for security and operational purposes and are not shared with third parties.

If you contact us by email, your email address and message content will be used solely to respond to your inquiry and will not be shared or used for marketing.

Marketplace Purchases

When you purchase or subscribe to a Lynxroute product through AWS Marketplace, Azure Marketplace or Alibaba Cloud Marketplace, the transaction is governed by the terms and privacy policies of the respective marketplace provider. Lynxroute receives only the information the marketplace chooses to share with publishers (typically aggregate usage data). We do not receive your payment details or personal account information.

• →AWS Marketplace Privacy Policy: aws.amazon.com/privacy
• →Microsoft Privacy Statement: privacy.microsoft.com
• →Alibaba Cloud Privacy Policy: alibabacloud.com/help/en/legal

Your Deployed Instances

VM images you deploy from Lynxroute run entirely within your own cloud account. All data processed by the deployed software - user data, configuration, logs - remains within your infrastructure. Lynxroute has no access to it.

The compliance artifacts bundled with each image (SBOM, CIS Conformance Report) are static files generated at build time and stored inside the VM. They do not transmit any information.

Third-Party Services

Lynxroute does not embed or integrate third-party tracking, advertising, or analytics services in its VM images or on this website.

Our VM images include open-source software from third-party projects. Each product's software bill of materials (SBOM) is available inside the deployed instance. The upstream projects may have their own privacy policies and terms.

Data Retention

Because we do not collect personal data, there is no personal data to retain or delete. Web server access logs are retained for no longer than 30 days. Email correspondence is retained only as long as necessary to resolve the inquiry.

Security

Lynxroute builds security-focused products and applies the same standards to our own operations. Our VM images are hardened to CIS Level 1 benchmarks before publication. Every build is scanned for known CVEs and includes a CycloneDX SBOM and CIS Conformance Report for auditability.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with a new effective date at the top of this page. Continued use of Lynxroute products after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

Short version: Lynxroute images bundle open source software under its own licenses with our hardening and configuration work. You may run them in your own cloud account for any lawful purpose. We provide the images as-is with expert support and a 24-hour response target. Billing and refunds are handled by the marketplace you purchased through.

1. Agreement

This End User License Agreement ("Agreement") is between Lynxroute ("we", "us") and the individual or organization deploying a Lynxroute virtual machine image ("you"). By launching a Lynxroute image from AWS Marketplace, Azure Marketplace, Alibaba Cloud Marketplace or any other channel, you accept this Agreement.

This Agreement is in addition to the terms of the marketplace through which you obtained the image. Where they conflict regarding billing, the marketplace terms apply.

2. What you are licensed to use

Each Lynxroute image consists of two parts:

• →Third-party open source software (the operating system and the application), licensed to you under each project's own open source license. The full list of components and their licenses is in the CycloneDX SBOM at /etc/lynxroute/sbom.json inside each instance.
• →Lynxroute hardening and configuration (CIS benchmark configuration, scripts, first-boot logic, compliance reports). We grant you a non-exclusive, non-transferable license to use this material as part of the deployed image, on the instances you run in your own cloud account.

You may not resell, redistribute or republish Lynxroute images or the Lynxroute configuration as a standalone product or competing marketplace listing.

3. Your responsibilities

Once deployed, the instance runs entirely in your infrastructure and under your control. You are responsible for:

• →Securing your cloud account, network configuration and access to the instance.
• →Managing the credentials generated at first boot and any data processed by the software.
• →Applying updates, or migrating to a newer Lynxroute release, when a rebuild is published.
• →Complying with the licenses of the bundled open source software and with applicable law in your use of the software.

4. Updates and rebuilds

We rebuild images on a scheduled cadence and perform out-of-cycle rebuild reviews when a critical CVE affects a published image. New releases are published as new marketplace versions. We do not modify, patch or access instances you have already deployed.

5. Support

Support is available through the contact form on this website and through the marketplace support channel. We aim to respond to every request within 24 hours. Support covers deployment, configuration of the Lynxroute image, and questions about bundled compliance artifacts. It does not cover custom development, third-party integrations, or operation of your wider cloud environment.

6. Fees and billing

All fees are set, collected and refunded by the marketplace through which you subscribed. Lynxroute does not process payments and does not receive your payment details. Refund requests are subject to the marketplace's refund policy.

7. Warranty disclaimer

Lynxroute images are provided "as is". We apply CIS Level 1 hardening, scan every release for known CVEs and bundle an SBOM and CIS Conformance Report, but we do not warrant that any image is free of vulnerabilities, that it satisfies any particular regulatory framework, or that the bundled software is fit for your specific purpose. Compliance of your overall environment remains your responsibility.

8. Limitation of liability

To the maximum extent permitted by law, Lynxroute is not liable for any indirect, incidental or consequential loss, including loss of data, revenue or business, arising from use of an image. Our total liability under this Agreement is limited to the fees you paid for the image through the marketplace in the twelve months preceding the claim.

9. Termination

This Agreement continues while you run a Lynxroute image. It ends when you terminate all instances and cancel your marketplace subscription. Sections 7 and 8 survive termination.

10. Changes

We may update this Agreement. The version in effect is the one published on this page at the time you launch an image. Material changes will be reflected in updated marketplace listings.

Contact

Questions about this Agreement: lynxroute.com/#contact