User Guide¶

Welcome to the SentriKat User Guide. This section covers day-to-day usage of the platform.

Overview¶

SentriKat provides a focused approach to vulnerability management:

1. Dashboard - At-a-glance view of your security posture
2. Products - Manage your software inventory
3. Vulnerabilities - Track and acknowledge CVEs
4. Compliance Reports - NIS2 Article 21, CISA BOD 22-01, executive PDFs
5. Alerts & Issue Trackers - Email, webhooks, Jira/GitHub/GitLab/YouTrack

Quick Navigation¶

Workflow Overview¶

graph LR
    A[Import Products] --> B[KEV Sync]
    B --> C[Vulnerability Matches]
    C --> D{Review}
    D -->|Patch| E[Acknowledge]
    D -->|Accept Risk| E
    D -->|Snooze| F[Remind Later]
    F --> D

Key Concepts¶

CISA KEV¶

The Known Exploited Vulnerabilities Catalog is maintained by CISA and contains vulnerabilities that:

• Have a CVE ID
• Have active exploitation in the wild
• Have clear remediation guidance

Priority Levels¶

SentriKat assigns priority based on:

Match Confidence¶

When matching products to vulnerabilities: