Is it safe to run on a production server?

Yes. The agent only reads local metrics and its own auth logs, and connects outbound over TLS. It opens no inbound ports and has no offensive capability.

Does it work on both Windows and Linux?

Yes. One protocol drives a systemd unit on Linux and a Windows Service, on amd64, arm64 and 386. The installer detects the platform for you.

How is the ingest secured?

Every agent enrolls with a client certificate and streams over mutual TLS. A stolen enrollment token is short-lived and cannot impersonate an already-enrolled host.

How does the two-level config work?

You set global templates once. Each server can override individual keys; overrides cascade on top of the defaults instead of replacing them, so a template change still reaches every host.

Yes. The panel ships as a docker-compose stack behind Traefik with Postgres (TimescaleDB optional). See the deploy guide in the repository.

What does brute-force detection cover?

The agent watches RDP and SSH authentication locally, so it flags an active password-guessing attack and its top source IPs in seconds, even before the panel refreshes.

How does billing work?

The first server is free forever, no card required. Paid plans are billed monthly or yearly: internationally via PayPro Global, in Russia via YooKassa, plus crypto as a fallback. Auto-renewal is on by default and can be turned off any time on the Billing page.

Sentinel — 面向 Windows 与 Linux 服务器群的监控平台

在一个界面管理整个服务器群。轻量代理通过 mTLS 上报 CPU、内存、磁盘与网络指标，按你使用的渠道推送告警，并实时标记暴力破解行为。首台服务器免费，无需信用卡。