Skip to content

Get Community Edition (On-Premises)

The Community Edition is the permanent free tier of the on-premises product. Run SentriKat entirely inside your own perimeter: your vulnerability data, scan results and full software inventory stay on your infrastructure. No credit card, no time limit, no contact form.

What does leave the installation, and how to turn it off

Two things reach us, and both are documented rather than implied:

  • a licence heartbeat every 12 hours (licence key, installation id, version, agent/asset counts, and knowledge-base freshness counters);
  • knowledge-base sync, which is enabled by default and shares the vendor/product to CPE mappings your installation learns locally, so every installation benefits from them.

Neither carries vulnerability data, scan results, hostnames, or your full inventory. To disable the sharing leg, set SENTRIKAT_KB_SHARE_MAPPINGS=false; to disable knowledge-base sync entirely (including the pull that keeps your matching current), set SENTRIKAT_KB_SYNC_ENABLED=false. See the Privacy Policy for the full description.

This page is the landing target for the Get Community Edition CTA on sentrikat.com/#pricing. If you need a more general or exhaustive walkthrough (updates, custom certificates, storage, troubleshooting), continue from Docker Deployment afterwards.

What you get

Community Edition Professional
Price Free EUR 4,999/yr
Users 3 Unlimited
Organizations 1 Unlimited
Products 100 Unlimited
Agents (Windows, Linux, macOS) 10 10 + agent packs
Basic dashboard included included
Daily exploited-vulnerability sync included included
Exploit probability scoring included included
Container scanning included included
Two-factor authentication (TOTP) included included
Backup export and restore included included
All vulnerability intelligence sources not included included
NIS2, DORA, BOD 22-01 reports not included included
SIEM/Syslog integration not included included
Jira, GitHub, GitLab integration not included included
Multi-tenant + White-Label not included included
LDAP/AD/SAML SSO not included included
Air-gapped deployment not included included
Scheduled backups and standard-format exports not included included

The numbers above are the canonical values served by https://api.sentrikat.com/api/v1/public/config/plans (the same source that powers the landing page). They will never silently drift from what you see on the marketing site.

Quick install (Docker Compose)

The fastest path: 5 minutes from a clean Linux host with Docker installed.

First, get the release bundle: log into the Customer Portal (free account, email one-time code, no credit card), open Downloads, and download the latest sentrikat-<version>.tar.gz. Then:

# 1. Extract the bundle and load the bundled Docker image
tar -xzf sentrikat-*.tar.gz -C /opt/
mv /opt/sentrikat-* /opt/sentrikat
cd /opt/sentrikat
docker load -i sentrikat-image-*.tar.gz

# 2. First-boot configuration
cp .env.example .env
${EDITOR:-vi} .env
# minimum (each one is documented in .env.example):
#   SECRET_KEY=$(openssl rand -hex 32)
#   ENCRYPTION_KEY=<Fernet key: generation command in .env.example>
#   DB_PASSWORD=<32+ random chars>

# 3. Start the stack
docker compose up -d

# 4. Wait for health
docker compose ps
# expect every service in "Up (healthy)" within ~60 seconds

Database migrations run automatically when the application boots. There is no manual migration step.

First run

Open http://<your-host> (or whichever hostname you point at the host). On first run SentriKat greets you with the setup wizard: create your admin account, name your organization, seed the product catalog, and the first the exploited-vulnerability catalogue sync starts automatically.

After the wizard, activate your license: Community Edition keys are issued automatically. Open Settings → License and click Get Community Edition key. The license-server (running on api.sentrikat.com) issues a free key bound to your installation ID, and SentriKat starts ingesting CVE intelligence on the next scheduler tick.

Air-gapped host?

The Get Community Edition key button reaches api.sentrikat.com. On an isolated host, use the offline activation flow instead (see Licensing: offline activation), and refresh feeds with the offline bundle.

Next steps

  • Install your first agent. Follow the Windows, Linux, or macOS agent guide.
  • Connect a data source. How SentriKat decides explains how the feeds are read and how to check they are answering.
  • Read the dashboard. Reading the Dashboard explains the KPI tiles and the "What changed since yesterday?" panel.

When you're ready for more

Community Edition is permanent: you never have to upgrade.

If you outgrow its limits, the Professional edition lights up the rest. The limits are more than 3 users, more than one organization, the SIEM, Jira and GitLab integrations, the NIS2 and DORA reports, multi-tenant and white-label, LDAP and SAML SSO, container scanning behind an air gap, and a support SLA. Write to [email protected].

There is no in-product upgrade button on Community Edition, and that is deliberate: we would rather you talked to a person first, so the licence comes out right.

Troubleshooting

docker compose up exits complaining about a missing SECRET_KEY, ENCRYPTION_KEY, or DB_PASSWORD

Production-mode safety check fired. You didn't change the defaults in .env. Re-edit .env to set the required variables. See Configuration.

Agents can't reach the API

Default deploy serves HTTP. The 2026 agent installer refuses plain HTTP unless -AllowHttp is passed. Either pass that flag for lab use, or front the stack with TLS following the TLS Setup runbook (Let's Encrypt, internal CA, or self-signed paths covered).

License key not accepted

Check that the host can reach https://api.sentrikat.com, the license-server validates and signs the activation. Air-gapped installs need the offline activation flow documented in Licensing & Activation.

Reference