Skip to content

Sharing

Share vulnerability reports with stakeholders without requiring them to log in.

  1. On the dashboard, apply the filters you want the recipient to see
  2. Click Share
  3. Fill in:
    • Name: what this link is for
    • Description: optional
    • Expiration: the date it stops working
  4. Save

You get a link at /shared/<token>. It opens without an account.

You can also share a single finding, from the row menu on the CVE.

What the recipient sees

A read-only view of what you shared. They cannot change anything, cannot see anything you did not share, and do not need an account.

Expiry

The link stops working on the expiration date you set. There is no separate page listing active links: the expiry is the control.

Set a short one for an auditor who needs a week, and a longer one for a recurring report.

Audit Trail

All share access is logged:

  • Timestamp
  • IP address
  • User agent
  • Pages viewed

Embedding

Embed vulnerability data in other systems:

<iframe
  src="https://sentrikat.example.com/shared/TOKEN"
  width="100%"
  height="600"
  frameborder="0">
</iframe>

CORS

Configure allowed origins in Settings for embedding.

API Access

Create shares programmatically:

curl -X POST http://localhost:5000/api/shared/create \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Weekly Report",
    "filters": {"priority": ["critical", "high"]},
    "expires_in_days": 30
  }'

Response: 

{
  "id": "abc123",
  "token": "share_xxxxx",
  "url": "https://sentrikat.example.com/shared/share_xxxxx",
  "expires_at": "2025-03-01T00:00:00Z"
}