North Pole Security
@northpolesec.bsky.social
North Pole Security account. We make Santa https://github.com/northpolesec/santa
- Added a “Copy Details” button to to FAA block dialogs
There are also a few small changes and bug fixes
Please checkout the release notes for more goodies.
There are also a few small changes and bug fixes
Please checkout the release notes for more goodies.
August 29, 2025 at 3:22 PM
- Added a “Copy Details” button to to FAA block dialogs
There are also a few small changes and bug fixes
Please checkout the release notes for more goodies.
There are also a few small changes and bug fixes
Please checkout the release notes for more goodies.
Press release can be found at apnews.com/press-releas...
North Pole Security Raises $4M to Bring Scalable, Proactive Endpoint Protection to the Enterprise
NEW YORK, July 30, 2025 (GLOBE NEWSWIRE) -- North Pole Security today announced it has raised $4 million in seed funding to deliver the first scalable, enterprise-grade endpoint protection platform fo...
apnews.com
July 30, 2025 at 2:17 PM
Press release can be found at apnews.com/press-releas...
There are also many other updates and bug fixes
Be sure to check out the release notes for full details!
github.com/northpolesec...
Be sure to check out the release notes for full details!
github.com/northpolesec...
Release v2025.6 · northpolesec/santa
Notes
ImportantThe binaries initially uploaded for this release only contained the arm64 slice. We have updated the binaries to be universal and also include the x86_64 slice as well. You may need ...
github.com
July 8, 2025 at 1:32 PM
There are also many other updates and bug fixes
Be sure to check out the release notes for full details!
github.com/northpolesec...
Be sure to check out the release notes for full details!
github.com/northpolesec...
We’d also like to call out that the Santa docs have been completely revamped and updated.
northpole.dev
There is also now a Santa Configuration Generator to help ease deployments!
northpole.dev/configuratio...
northpole.dev
There is also now a Santa Configuration Generator to help ease deployments!
northpole.dev/configuratio...
Santa
northpole.dev
July 8, 2025 at 1:32 PM
We’d also like to call out that the Santa docs have been completely revamped and updated.
northpole.dev
There is also now a Santa Configuration Generator to help ease deployments!
northpole.dev/configuratio...
northpole.dev
There is also now a Santa Configuration Generator to help ease deployments!
northpole.dev/configuratio...
Executable signing times are now included in events sent to sync servers.
This lets you make policies like software written by North Pole Security can only run if it's newer than 2025-06-27 on the server
You can also do this in CEL
This lets you make policies like software written by North Pole Security can only run if it's newer than 2025-06-27 on the server
You can also do this in CEL
July 8, 2025 at 1:32 PM
Executable signing times are now included in events sent to sync servers.
This lets you make policies like software written by North Pole Security can only run if it's newer than 2025-06-27 on the server
You can also do this in CEL
This lets you make policies like software written by North Pole Security can only run if it's newer than 2025-06-27 on the server
You can also do this in CEL
We've added distributed notifications to FAA.
If you have other tools that need to do something like send a webhook when a file is read / touched this lets you do it easily.
If you have other tools that need to do something like send a webhook when a file is read / touched this lets you do it easily.
July 8, 2025 at 1:32 PM
We've added distributed notifications to FAA.
If you have other tools that need to do something like send a webhook when a file is read / touched this lets you do it easily.
If you have other tools that need to do something like send a webhook when a file is read / touched this lets you do it easily.
See our CEL docs for more details details and examples as well as the Rule schema for information on how to populate the expression.
t.co/ckvc4bSvCw
t.co/ckvc4bSvCw
https://northpole.dev/features/binary-authorization/#cel
t.co
July 8, 2025 at 1:32 PM
See our CEL docs for more details details and examples as well as the Rule schema for information on how to populate the expression.
t.co/ckvc4bSvCw
t.co/ckvc4bSvCw
Use this to:
- Block bindshells with nc.
- Stop electron apps from injecting javascript
- Only run apps newer than a specific date
- Or anything you can think up with the combination.
We look forward to seeing the uses you come up with
- Block bindshells with nc.
- Stop electron apps from injecting javascript
- Only run apps newer than a specific date
- Or anything you can think up with the combination.
We look forward to seeing the uses you come up with
July 8, 2025 at 1:32 PM
Use this to:
- Block bindshells with nc.
- Stop electron apps from injecting javascript
- Only run apps newer than a specific date
- Or anything you can think up with the combination.
We look forward to seeing the uses you come up with
- Block bindshells with nc.
- Stop electron apps from injecting javascript
- Only run apps newer than a specific date
- Or anything you can think up with the combination.
We look forward to seeing the uses you come up with
First and this is a big one:
Common Expression Language (CEL) policies can now be attached to rules!
This allows for blocking/allowing by arg, env var, or signing timestamp
Common Expression Language (CEL) policies can now be attached to rules!
This allows for blocking/allowing by arg, env var, or signing timestamp
July 8, 2025 at 1:32 PM
First and this is a big one:
Common Expression Language (CEL) policies can now be attached to rules!
This allows for blocking/allowing by arg, env var, or signing timestamp
Common Expression Language (CEL) policies can now be attached to rules!
This allows for blocking/allowing by arg, env var, or signing timestamp
More powerful glob expansion for FAA rules to better target files that don’t yet exist
May 29, 2025 at 1:12 PM
More powerful glob expansion for FAA rules to better target files that don’t yet exist
A new santactl eventupload command to help admins get application info to the sync server without needing a block rule
May 29, 2025 at 1:12 PM
A new santactl eventupload command to help admins get application info to the sync server without needing a block rule
You can drag an app or binary on to the about window or Santa icon to get information about it as well!
May 29, 2025 at 1:12 PM
You can drag an app or binary on to the about window or Santa icon to get information about it as well!
The “About” dialog is now more useful, giving admins a way to direct users to perform manual syncs or get file info without having to go to the command line
May 29, 2025 at 1:12 PM
The “About” dialog is now more useful, giving admins a way to direct users to perform manual syncs or get file info without having to go to the command line
We added support for the TCC events! northpole.dev/features/tel...
Telemetry | Santa
Santa collects and outputs telemetry data about security events. This data is
northpole.dev
May 5, 2025 at 5:52 PM
We added support for the TCC events! northpole.dev/features/tel...