Welcome to SentriKat¶
-
SaaS, Nothing to Install SaaS
No installation needed. Sign up, deploy agents, see results. Free during Early Access, no credit card.
-
Self-Hosted, Full Control On-Prem
Deploy on your own infrastructure with Docker. TOTP 2FA included; air-gapped operation is part of Professional.
-
Exploited First Both
Every vulnerability in the software you actually run, on the machines that have it, with the ones publicly confirmed as exploited in the wild first.
-
REST API Both
REST API to integrate SentriKat with your existing tools and workflows.
What is SentriKat?¶
SentriKat is a vulnerability management platform that focuses on what matters most: vulnerabilities that are actively being exploited. Available as a fully managed SaaS or on-premises deployment.
Instead of overwhelming you with hundreds of thousands of CVEs, SentriKat tracks the published catalogue of exploited vulnerabilities and matches them against your software inventory.
Key Features¶
- Multi-Source Intelligence - CVSS scores cross-checked across three independent public databases with automatic fallback. Learn more
- Exploited-first - Track actively exploited vulnerabilities from both US (the exploited-vulnerability catalogue) and European (European vulnerability database) databases
- Data Provenance - Every score carries a
cvss_sourcetag so you know exactly where it came from - Multi-Platform Scanning - Native agents for Windows, Linux, macOS, and container images (Docker/Podman)
- Vendor Advisory Sync - Auto-detect patches from Red Hat, Microsoft, Debian, and package advisories
- Three-Tier Confidence - Affected / Likely Resolved / Resolved status for every vulnerability
- NIS2 and BOD 22-01 Reports - Article 21 mapping, remediation due-date tracking, executive summary PDFs (Professional and Cloud Pro and above)
- SIEM Integration - Forward events to Splunk, ELK, ArcSight, QRadar via syslog (CEF/JSON/RFC 5424)
- Issue Tracker Integration - Auto-create issues in Jira, GitHub, GitLab, YouTrack
- Community Knowledge Base - Professional installations share CPE mappings; complete software identity catalogue included
- Intelligent Matching - CPE-based matching with distro-native version comparison (dpkg, RPM, APK)
- Multi-tenant - Isolated organizations with role-based access
- Flexible Inventory - Agents, Lansweeper, SCCM/Intune, API, or CSV import
- Smart Alerts - Email, Slack, Teams, Discord notifications with escalation policies
- SaaS or Self-Hosted - Managed cloud at app.sentrikat.com, or on your own servers with Docker. TOTP 2FA is included; air-gapped operation is part of Professional
Quick Start¶
SaaS No installation needed. Free during Early Access, no credit card.
- Sign up at sentrikat.com: click Get started and choose SentriKat Cloud
- Log in at app.sentrikat.com with your credentials
- Deploy agents to your endpoints (Windows, Linux, macOS)
- View results: vulnerabilities are matched automatically
Follow the full walkthrough: SaaS Quick Guides (8 step-by-step guides)
On-Prem Deploy on your own infrastructure with Docker.
- Download SentriKat from the Customer Portal
- Extract the archive to your server:
- Configure your environment:
- Start with Docker Compose:
- Open
https://localhost/on 1.4.0-beta and later (http://localhost:5000on 1.3.0-beta and earlier) and complete the setup wizard
Detailed instructions: Docker Deployment Guide
Editions & Pricing¶
SaaS Plans¶
| Plan | Launch price | Agents | Users | Organizations |
|---|---|---|---|---|
| Starter | €590/year | 10 | 3 | 1 |
| Pro | €2,490/year | 25 | 5 | 1 |
| Business | €6,490/year | 50 | 10 | 10 |
| Enterprise | Custom | Unlimited | Custom | Unlimited |
All SaaS plans include the daily exploited-vulnerability feed, agent discovery (operating systems, browsers, IDEs, containers) and email alerts. Organizations count the root organization plus its sub-organizations.
Add-on: Compliance Pack (€1,990/year, Pro and above): DORA, PCI-DSS v4.0, ISO/IEC 27001:2022 and SOC 2 reports. NIS2 and BOD 22-01 reports are part of Pro and above without the Pack.
Early Access: Cloud is free
During Early Access the Cloud plans are free: you get the plan you choose (Starter, Pro or Business) with its full limits and features, and the Compliance Pack is included. No credit card. Enterprise is set up with sales. Cloud places are limited to 30 customers. On-premises, the Community Edition has no limit on sign-ups, and hands-on onboarding is for 15 customers at a time.
The prices above apply when Early Access ends and billing starts. We tell you by email at least 30 days in advance, and from then you keep the launch price for 12 months. Prices in EUR, excluding VAT. Full details on the pricing page and in the Founding Customer Terms.
On-Premises Editions¶
| Community Edition | Professional | |
|---|---|---|
| Price | Free | EUR 4,999/yr |
| Users | 3 | Unlimited |
| Organizations | 1 | Unlimited |
| Products | 100 | Unlimited |
| Agents (Windows, Linux, macOS) | 10 | 10 + agent packs |
| Basic dashboard | included | included |
| Daily exploited-vulnerability sync | included | included |
| Exploit probability scoring | included | included |
| Container scanning | included | included |
| Two-factor authentication (TOTP) | included | included |
| Backup export and restore | included | included |
| All vulnerability intelligence sources | not included | included |
| NIS2 and BOD 22-01 reports | not included | included |
| SIEM/Syslog integration | not included | included |
| Jira, GitHub, GitLab integration | not included | included |
| Multi-tenant + White-Label | not included | included |
| LDAP/AD/SAML SSO | not included | included |
| Air-gapped deployment | not included | included |
| Scheduled backups and standard-format exports | not included | included |
Compliance Pack on premises: the DORA, PCI-DSS v4.0, ISO/IEC 27001:2022 and SOC 2 reports are a paid add-on to Professional, which does not include them on its own.
Multi-year discounts: 2 years (10% off), 3 years (15% off). Agent Packs: add more agents as needed (+25, +50, +100, unlimited).
See pricing details for more information.
Support¶
- Documentation: You're reading it!
- Email: [email protected]
- Sales: [email protected]