What does secure software deployment mean at Hawk?

Tamper-proof distroless images with Cosign signing, optional Falco runtime detection, on-prem agent checks, and audit logging around license enforcement.

Is Falco included on every plan?

Falco runtime detection is published as a Pro+ capability in Hawk comparisons—confirm plan fit during commercial onboarding.

How do distroless images help?

Distroless images remove shell and package-manager surfaces; Cosign signing supports verifying image integrity at deploy time.

Does the on-prem agent replace cloud licensing?

The on-prem agent supports offline and local verification workflows; cloud console revoke and heartbeats remain part of Hawk’s published model.

Are OT SIEM and OT SOAR part of secure deployment today?

No. Those modules are roadmap. Do not treat Hawk OT SIEM/SOAR as GA secure-deployment features.

Where do we see pricing and features?

Learn more on hawk.axixtechnologies.com for pricing and trial, and Explore modules on site.hawk.axixtechnologies.com/features.

Secure Software Deployment

Axix Hawk supports secure software deployment for ISVs who need tamper-proof images, runtime detection, and enforceable licenses. Ship distroless containers signed with Cosign, detect risky runtime behavior with Falco, run an on-prem agent with local status, and keep an append-only audit log—while Hawk OT SIEM and OT SOAR stay labeled roadmap, not GA deployment features.

Learn more Explore modulesstarting from $30/product/mo

Tamper-proof images and runtime detection

Tamper-proof images use distroless runtimes (no shell, no package manager), Cosign image signing, and seccomp whitelists. Falco runtime detection watches for shell-in-container, ptrace, and license exfiltration patterns on Pro+ plans as published in Hawk comparisons.

On-prem agent, revoke, and audit log

The on-prem agent supports local verification and status APIs. Machine-locked licensing, heartbeat enforcement, and remote kill-switch protect deployed products. Webhooks and a full audit log record license issued, revoked, expired, and renewed events when enabled on eligible plans.

Pricing and next steps

Plans start from the published per-product monthly rate. Learn more on hawk.axixtechnologies.com for pricing and trial, or Explore modules on site.hawk.axixtechnologies.com/features for tamper-proof images, Falco, and on-prem agent pages. OT SIEM and OT SOAR are roadmap.

Key capabilities

Distroless runtime (no shell, no package manager)
Cosign image signing
Seccomp whitelist hardening
Falco runtime detection (Pro+)
On-prem agent with local status API
Machine-locked licensing and heartbeat revoke
Append-only audit log
License webhooks (Pro+)
OT SIEM — roadmap
OT SOAR — roadmap

Frequently asked questions

Explore adjacent Axix pages that teams commonly review alongside this topic.

Ready to talk with Axix Technologies?

Review commercial pricing and trial options, or explore modules on the product site.

Learn more Explore modules