# Seal OS

**Seal OS** remediates vulnerabilities in OS-level packages and language runtimes (Node.js, Python, JVM, and others) on your Linux servers and inside your containers. It covers the system layer that sits below your application code.

## What it covers

OS package ecosystems:

* **APK** (Alpine)
* **DEB** (Debian, Ubuntu)
* **RPM** (Red Hat, CentOS, RHEL, Fedora, Amazon Linux)

Open-source language runtimes installed via the OS package manager are also covered, including Node.js, Python, and the JVM.

Seal OS supports **EOL distributions**. When the upstream distribution maintainer has stopped releasing security updates, Seal continues to ship sealed package versions for the affected components.

## How it is delivered

Seal OS applies fixes via the Seal CLI, in place. The CLI runs on your Linux servers, inside your container builds, or in standalone environments, and installs sealed versions of the affected packages where they live.

## Related

* [Setting up Seal OS](https://github.com/seal-community/gitbook/blob/main/new-docs/setup-apps-os/seal-os-cicd/README.md): day-1 setup.
* [Working with Seal OS](https://github.com/seal-community/gitbook/blob/main/new-docs/using-platform/working-with-seal-os.md): the day-to-day workflow.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sealsecurity.io/new-documentation/new-docs/product-family/seal-os.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.