A desktop that seals itself to your hardware.
Prismara OS is a hardened, image-based Linux desktop built on openSUSE Leap 16 with KDE Plasma 6. The disk is encrypted and sealed to the device's TPM, so it unlocks without a prompt on your machine and stays locked anywhere else. A graphical installer gets people from USB stick to a working desktop, and the Prismara apps come optionally.
What Prismara OS does
Sealed to your hardware
Full-disk encryption is sealed to the TPM, so the device starts without an unlock prompt, while a removed disk is unreadable.
Immutable system
A read-only system image with snapshots, so a bad update rolls back instead of leaving a broken desktop.
Easy to install and set up
A graphical installer and first-run setup cover Wi-Fi, 11 languages and keyboard layouts.
Familiar desktop
KDE Plasma 6 on Wayland in Prismara's own look, with a taskbar people already know.
Prismara built in
Prismara apps are optional, and Prismara Prism provides secrets storage for the whole desktop.
Help when you need it
A support report app gathers what your IT team needs in one step.
How it's secured
Prismara OS follows the engineering rules shared across the suite, plus these product-specific measures.
Secure Boot your way
Microsoft-signed boot for Personal and Business; SovSec's own platform keys for Enterprise.
TPM-sealed encryption
Disk keys are released only on the device they were sealed to, after a Secure Boot start.
Open source you can check
Built on GPL and LGPL upstream components, with source published for every release.
Connects to the rest of the suite
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.