Hosted Safe
Ready
Asset Inventory
Collects basic platform and environment inventory from the hosted service.
Authorized operators only
Private arsenal view for controlled security work.
Browse every registered SENTINEL capability, see what can run safely in the hosted control plane, and confirm which advanced workflows require an approved local lab node before execution.
Total Tools15
Registered platform capabilities
Hosted Safe3
Allowed in the web control plane
Lab Only12
Requires authorized local execution
Ready Now3
Available through hosted or connected nodes
Connected Nodes1
Categories6
Execution BoundaryActive
Cloud FallbackActive
Cloud fallback mode
Access without the Mac
Available Now
Hosted-safe actions stay available through Cloudflare and Render: inventory, baseline, platform review, readiness, reporting, and AI summary fallback.
Dedicated Route
Add fallback.sentinel-defense.net in Cloudflare and Render. It will open this same private fallback console directly.
Lab Queue
Lab-only tools can be queued with scope notes. They remain blocked from Render until an approved Mac or cloud lab node connects.
Network reconnaissance readiness
authorized lab node only
nmap, amass, subfinder, dnsutilsWeb and application review readiness
authorized lab node only
semgrep, trivy, gitleaks, bandit, checkovMobile inspection readiness
authorized test devices only
apktool, adb, frida-toolsEvidence and reporting support
safe inventory and report inputs
syft, grype, osv-scannerCapability matrix
Tools by mission category
Hosted Safe
Ready
Network Baseline
Creates a safe high-level baseline of the running platform environment.
Hosted Safe
Ready
AI Analysis
Produces safe triage, summary, and reporting outputs.
Lab Node
Gated
Network Enumeration
Lab-only network enumeration for authorized environments.
Lab Node
Gated
Application Inspection
Lab-only Android package inspection for authorized applications.
Lab Node
Gated
Mobile Instrumentation
Lab-only mobile instrumentation for authorized test devices and apps.
Lab Node
Gated
Email & Domain Harvesting
Lab-only OSINT harvesting of emails, subdomains, and open-source intel for authorized targets.
Lab Node
Gated
Attack Surface Mapping
Lab-only in-depth DNS enumeration and attack surface mapping for authorized scopes.
Lab Node
Gated
Username OSINT
Lab-only username reconnaissance across social networks and public platforms.
Lab Node
Gated
Whois & DNS Lookup
Lab-only domain registration and DNS record lookups for authorized investigation.
Lab Node
Gated
Static Code Security Scan
Lab-only static code security scanning for authorized repositories.
Lab Node
Gated
Vulnerability & Dependency Scan
Lab-only filesystem, dependency, and container vulnerability scanning.
Lab Node
Gated
Secret Detection
Lab-only secret and credential detection for authorized repositories.
Lab Node
Gated
Python Security Scan
Lab-only Python security linting for authorized codebases.
Lab Node
Gated
IaC & Cloud Config Scan
Lab-only infrastructure-as-code and cloud configuration scanning.
Secure access console
Tool action output
Choose a tool card action to view its safe runtime status, node requirements, and audit boundary.
Operating model
Built like a modern cyber platform
Control Plane
Hosted routes handle visibility, assessment orchestration, reporting, and executive summaries.
Execution Nodes
Advanced tools stay behind approved local or lab nodes where scope and authorization can be enforced.
Evidence Layer
Outputs become finding cards, risk narratives, and report-ready evidence instead of disconnected logs.