--- title: Ubuntu Security description: 'Ubuntu security: vulnerability management, kernel hardening, AppArmor, Livepatch, and compliance tooling from Canonical.' url: https://ubuntu.com/security --- # Ubuntu security Enterprise-grade security for open source environments Ubuntu delivers transparency, predictability, and automation to help teams safeguard their open source stack and meet compliance requirements. [Contact us](https://ubuntu.com/security#get-in-touch) [Watch the webinar ›](https://ubuntu.com/engage/defense-in-depth) --- ## Ubuntu is trusted by --- ## Platform security from the ground up * Default secure configuration: Ubuntu is configured to be secure out-of-the-box, with most network ports closed by default and a firewall enabled to prevent unauthorized access. * Unprivileged User Namespace Restrictions reduce the potential attack surface by limiting certain user capabilities. * Full Disk Encryption (FDE): Protects data at rest by encrypting entire storage devices. * AppArmor provides fine-grained security confinement for applications, limiting their access to system resources and reducing attack surfaces. [Read about Ubuntu's platform security features ›](https://ubuntu.com/security/platform-security) --- ## Reliable vulnerability management Ubuntu is a Linux-based OS. It inherits Discretionary Access Control and includes Mandatory Access Control via AppArmor. Since 2004, Ubuntu has provided a robust security foundation to protect your open source ecosystem, with up to 15 years of security maintenance and support to let you build with confidence. [Check out the Ubuntu release cadence ›](https://ubuntu.com/about/release-cycle) ### From identification to testing and remediation Canonical works with leading scanning vendors to help users identify vulnerabilities in their Ubuntu environment and reduce the likelihood of false positives. Vulnerability information, including available fixes, is distributed through open standard formats. Features like 'unattended-upgrades' enable you to apply fixes automatically when they are available. Our team tests and backports the patches to previous, supported versions of Ubuntu, so your environment remains stable. [Read more about Ubuntu and security assurance ›](https://ubuntu.com/security/assurances) --- ### Fast fixes Vulnerabilities will always arise. What matters is the speed and success with which they are resolved – and nobody provides fixes available faster than Canonical. --- ### Long Term Support (LTS) Every Long Term Support (LTS) release of Ubuntu comes with five years of standard security and maintenance updates for the main OS. Expand that to up to 15 years with [Ubuntu Pro](https://ubuntu.com/pro) – not just for the main OS but for all the open source packages you consume from Ubuntu. [Read more about vulnerability management ›](https://ubuntu.com/security/vulnerability-management) --- ## Run regulated and high-security workloads on Ubuntu Ubuntu Pro has been designed to simplify your security compliance burden for frameworks such as NIST, [FedRAMP](https://ubuntu.com/security/fedramp), [PCI-DSS](https://ubuntu.com/security/pci-dss), ISO27001 by providing [FIPS-validated cryptographic modules](https://ubuntu.com/security/fips), and automated system hardening for [CIS](https://ubuntu.com/security/cis) and [DISA STIG](https://ubuntu.com/security/disa-stig). [Get help with your security standard ›](https://ubuntu.com/security/security-standards) ### How do I harden my Ubuntu system? Hardening always involves a tradeoff with usability and performance. The default configuration of Ubuntu LTS releases, as provided by Canonical, balances between usability, performance, and security. However, systems with a dedicated workload are well positioned to benefit from hardening. You can reduce your workload's attack surface by applying an Industry-accepted baseline. [Read a guide to infrastructure hardening ›](https://ubuntu.com/engage/a-guide-to-infrastructure-hardening) --- ## Maximize security and compliance with Pro Ubuntu is a trusted platform used in millions of production environments and devices. Ubuntu Pro is Canonical’s comprehensive subscription for open source security, support, and compliance. With Ubuntu Pro, you get access to a trusted open source repository, compliance profiles for the most stringent security standards, and up to 15 years of vulnerability fixes for your OS, infrastructure, and applications. --- ### Ubuntu * 5 years of Long-Term Support (LTS) for the Operating System's Main repository * A vast, securely-maintained software ecosystem * Enterprise-grade security features such as Secure Boot and AppArmor --- ### Ubuntu Pro * [Expanded Security Maintenance (ESM)](https://ubuntu.com/security/esm) for up to 15 years for the Operating System as well as Infrastructure and Applications. * [Kernel Livepatch](https://ubuntu.com/security/livepatch) to minimize downtime without reboots. * [Landscape](https://ubuntu.com/landscape) to deploy, monitor, and manage your Ubuntu servers and desktops. Manage security updates and compliance audits. * Enterprise support tier, including phone and ticket-based support. * [Hardening and compliance](https://ubuntu.com/security/compliance-automation) via CIS benchmarks and DISA-STIG guidelines. FIPS-certified cryptography to meet government and enterprise security mandates. * Access to Canonical-maintained security patches for the Universe repository – ideal for teams who want to use a single trusted repository for open source packages. * [Learn more about Ubuntu Pro ›](https://ubuntu.com/pro) * [Get a 30-day free trial ›](https://ubuntu.com/pro/free-trial) --- ## Ubuntu Pro is free for personal use. [Start today ›](https://ubuntu.com/pro/subscribe) --- ## Ubuntu security resources ### Airlock Digital boosts operational performance on Azure by 30% Faced with the looming End of Life (EoL) for CentOS 7, Airlock Digital needed to find a new OS to drive their application control software. By migrating to Ubuntu 24.04 LTS for Azure, Airlock Digital was able to continue stable operations and meet stricter security requirements, with up to 40% improvements in performance and operational cost savings. [Learn how Ubuntu Pro brought security and efficiency to Airlock Digital’s operations ›](https://canonical.com/case-study/airlock-digital-ubuntu-pro-azure-case-study) --- ### Large games publisher secures code dependencies and avoid costly migration A leading game developer chose Ubuntu Pro to secure its mission-critical code for its gaming titles. Ubuntu Pro helped the company to avoid a costly, effort-intensive migration to upgrade to more recent versions — an effort that would have taken their teams 6 to 8 months to complete. [Find out how Ubuntu Pro brought time and stability to this major publisher ›](https://canonical.com/case-study/ubuntu-pro-support-for-games-developer) --- ### Lucid Software meet FedRAMP compliance for government contracts Lucid wanted to offer its Visual Collaboration Suite to Federal and Government organizations — but this required meeting FedRAMP compliance. To solve this challenge, Lucid accessed a FIPS-compliant Ubuntu image for AWS by adopting Ubuntu Pro through the AWS marketplace, allowing them access to all the FIPS 140-2 certified packages and auditing tools they would need. [Learn how Lucid met FedRAMP compliance through Ubuntu Pro ›](https://canonical.com/case-study/lucid-aws-fedramp-compliance-case-study) --- ### Ubuntu security disclosure policy Canonical and the Ubuntu Security Team participate in responsible disclosure and collaborate with the wider community on security issues. [Read Ubuntu's security disclosure policy ›](https://ubuntu.com/security/disclosure-policy) --- ### Stay informed with the latest security updates and fixes * [Ubuntu security updates mailing list ›](https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened) * [Security announcements mailing list ›](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce)