Is it safe to run on a production server?

Yes. The agent only reads local metrics and its own auth logs, and connects outbound over TLS. It opens no inbound ports and has no offensive capability.

Does it work on both Windows and Linux?

Yes. One protocol drives a systemd unit on Linux and a Windows Service, on amd64, arm64 and 386. The installer detects the platform for you.

How is the ingest secured?

Every agent enrolls with a client certificate and streams over mutual TLS. A stolen enrollment token is short-lived and cannot impersonate an already-enrolled host.

How does the two-level config work?

You set global templates once. Each server can override individual keys; overrides cascade on top of the defaults instead of replacing them, so a template change still reaches every host.

Yes. The panel ships as a docker-compose stack behind Traefik with Postgres (TimescaleDB optional). See the deploy guide in the repository.

What does brute-force detection cover?

The agent watches RDP and SSH authentication locally, so it flags an active password-guessing attack and its top source IPs in seconds, even before the panel refreshes.

How does billing work?

The first server is free forever, no card required. Paid plans are billed monthly or yearly: internationally via PayPro Global, in Russia via YooKassa, plus crypto as a fallback. Auto-renewal is on by default and can be turned off any time on the Billing page.

Sentinel — supervision de parcs de serveurs Windows et Linux

Tout votre parc dans une seule vue. Un agent léger transmet CPU, mémoire, disque et réseau via mTLS, envoie des alertes sur vos canaux et signale les attaques par force brute en temps réel. Premier serveur gratuit, sans carte.