Announcement

New LTS for FreeBSD is now available in an initial release  Learn More

Klara
Emergency Help
Use case · Secure & Compliant Storage

Secure ZFS and FreeBSD storage you can defend in an audit

Klara builds encrypted, authenticated OpenZFS storage on a FreeBSD release supported for at least five years, with backported security fixes and documentation your auditors can follow.

Talk to an engineer
Explore LTS for FreeBSD
Built on
  • OpenZFS
  • FreeBSD
  • LTS for FreeBSD
Who it's for
  • Security and network appliance vendors building on FreeBSD
  • Regulated operators who need encryption they can prove
  • Teams with long validation cycles or air-gapped systems
Glowing document icons held in rows of separate glass compartments
Security and compliance on ZFS

Why compliance is a lifecycle problem

Passing the first audit is the easy part. Staying patched, encrypted and provable for years, on a platform you can’t requalify every quarter, is where most teams struggle.

Proving data hasn't been altered

Encryption keeps data private, but auditors also want proof that tampering would be detected. OpenZFS native encryption authenticates every block, when it is set up and documented correctly.

Release cycles that outrun validation

A FreeBSD minor release is supported for months, while certifying a platform can take a year or more. Requalifying on every release burns time your team does not have.

Air-gapped and regulated sites

Systems that never touch the internet still need security fixes. Updates have to arrive on a known schedule, install offline and come with a record of what changed.

Proof

“Cooperation with Klara has saved us considerable time and helped us pass security qualifications—ultimately resulting in an even better OPNsense firewall. We always appreciated the professional attitude of the people at Klara and their in-depth knowledge of various parts of the kernel.”

Ad Schellevis, CIO, Deciso B.V. · Netherlands

How Klara helps

The services behind this solution

Each links to the full service page.

FreeBSD

LTS for FreeBSD

One FreeBSD release supported for at least five years, with quarterly security rollups and offline bundles for air-gapped systems.

→
ZFS dev

Compression and Encryption – ZIO

Engineering work on OpenZFS native encryption and authentication in the ZFS I/O pipeline, built around your requirements.

→
FreeBSD

FreeBSD Platform Validation

Qualify your hardware and workload on a known FreeBSD release before it goes to production or to an assessor.

→
Support

FreeBSD Infrastructure Support

Ongoing expert cover for production FreeBSD systems, including help acting on security advisories.

→
How Klara keeps you compliant

Staying audit-ready, release after release

1

Lock in a supported baseline

We agree on one FreeBSD release, your architectures and the packages your workload depends on, and set up OpenZFS encryption and key handling the way your auditors expect to see it.

2

Patch on a predictable schedule

Security fixes arrive as quarterly rollups on set dates, with urgent fixes shipped outside the schedule and offline bundles for air-gapped systems. Fixes are backported without changing how your systems behave.

3

Keep the evidence ready

Every fix comes with documentation of what changed and why, so at any point you can show auditors that your platform is current, encrypted and unaltered.

Go deeper

Additional Resources

On-demand webinar

FreeBSD Security in Production: Vulnerability Response and Operational Best Practices

Watch now

Article

Keeping Data Safe with OpenZFS: Security, Encryption, and Delegation

Read now

Article

FreeBSD Release Cycles and Enterprise Requirements: Why LTS Matters

Read now

Get started

Plan a storage platform your auditors can sign off

Tell us about your platform, your audit requirements and your release schedule. Our teams have a 72h response time, so someone will reach out shortly.

Production down right now?

Get Emergency Help