Enterprise Linux architecture
RedHat, Ubuntu, SUSE and Debian environments designed for the lifecycle you actually run, from provisioning to patch policy to end-of-life migration.
Senior Linux, platform and security engineering for Dutch organisations operating complex, business-critical environments.
Hardened systems and proactive risk reduction.
Architecture, lifecycle management and seamless integration.
Ansible, observability and CI/CD for consistent, dependable results.
Clear communication. No unnecessary complexity.
Every engagement is run by a senior engineer, not routed through a support desk. You get one point of contact who actually does the work.
RedHat, Ubuntu, SUSE and Debian environments designed for the lifecycle you actually run, from provisioning to patch policy to end-of-life migration.
Ansible playbooks, CI/CD pipelines and Kubernetes rollouts built to be re-run safely, not one-off scripts nobody wants to touch again.
Monitoring, alerting and incident response tuned to your actual failure modes, so on-call means something real instead of noise.
Hardening baselines, network segmentation and access control that hold up under audit, not just under a demo.
Ongoing operational ownership for teams who need senior Linux coverage without carrying a full-time hire.
Root-cause investigation after an incident, with a clear report and the concrete fix — not just a summary of what went wrong.
Four steps, in order, every time. No phase starts until the one before it is signed off.
We map what's actually running today — services, dependencies, and the risks nobody's written down yet.
A prioritised, plain-language report: what's fragile, what's urgent, and what can wait.
Changes go through code and automation, tested before they touch anything live.
Your team gets documentation they can actually use, plus a direct line to us afterwards.
# Idempotent by design — safe to run against production, every time.
- name: Apply hardened baseline
hosts: production
become: true
tasks:
- name: Enforce SSH key-only auth
lineinfile:
path: /etc/ssh/sshd_config
regexp: '^PasswordAuthentication'
line: 'PasswordAuthentication no'
notify: restart sshd
- name: Confirm firewalld default zone is locked down
command: firewall-cmd --get-default-zone
changed_when: false
register: fw_zone
failed_when: fw_zone.stdout != 'drop'
LinuxCore is the enterprise infrastructure practice within the Wonder Cohen group. We work with Dutch organisations where downtime isn't an inconvenience — it's a liability.
No account managers, no junior bench. Every engagement is led by a senior engineer who stays with the project from discovery through handover.
Part of the Wonder Cohen group →Ventures under the Wonder Cohen group that put this same engineering discipline into a product.
PQCore grew out of the same practical infrastructure mindset behind LinuxCore: build defensible systems, test them honestly, and state the limitations clearly.
MVP v1.0.0 has now shipped, and the project has moved into post-MVP hardening and validation.
Visit PQCore →Send a short description of your environment and what's not working. You'll hear back from an engineer, not a form response.
Or reach us directly at info@linuxcore.nl