Is it safe to run on a production server?

Yes. The agent only reads local metrics and its own auth logs, and connects outbound over TLS. It opens no inbound ports and has no offensive capability.

Does it work on both Windows and Linux?

Yes. One protocol drives a systemd unit on Linux and a Windows Service, on amd64, arm64 and 386. The installer detects the platform for you.

How is the ingest secured?

Every agent enrolls with a client certificate and streams over mutual TLS. A stolen enrollment token is short-lived and cannot impersonate an already-enrolled host.

How does the two-level config work?

You set global templates once. Each server can override individual keys; overrides cascade on top of the defaults instead of replacing them, so a template change still reaches every host.

Yes. The panel ships as a docker-compose stack behind Traefik with Postgres (TimescaleDB optional). See the deploy guide in the repository.

What does brute-force detection cover?

The agent watches RDP and SSH authentication locally, so it flags an active password-guessing attack and its top source IPs in seconds, even before the panel refreshes.

How does billing work?

The first server is free forever, no card required. Paid plans are billed monthly or yearly: internationally via PayPro Global, in Russia via YooKassa, plus crypto as a fallback. Auto-renewal is on by default and can be turned off any time on the Billing page.

Sentinel — Windows・Linux サーバー群のモニタリング

サーバー群を一つの画面で。軽量エージェントが CPU・メモリ・ディスク・ネットワークを mTLS で送信し、使っているチャネルへ通知し、総当たり攻撃をリアルタイムで検知します。1 台目は無料、カード不要。