Sentel Endpoint Protection & Inventory Agent
A flagship sensor project of the Sentel Framework. It’s the small piece of software installed on your organization’s laptops and servers that turns them into live, security-aware assets inside Sentel.
Instead of treating endpoints as “black boxes,” this agent continuously reports what matters:
- Which devices you actually have
- Who is using them
- What software is installed
- When something suspicious appears on disk
Deeply connected to Sentel’s malicious intelligence
The agent is directly connected to the Sentel Malicious Database — a continuously updated collection of hundreds of thousands of known-bad file hashes, IP addresses, domains, and other indicators. As users work, the agent quietly compares what it sees on the endpoint against this intelligence:- New or changed files can be checked against known malicious hashes
- Network-related data can be compared against suspicious IPs and infrastructure
- Activity is constantly evaluated to see if it matches patterns from real-world attacks
Complete visibility of your fleet
The agent builds and maintains a live inventory of devices and installed applications. You can instantly answer questions like:“How many machines still have this vulnerable version installed?” or “Which endpoints belong to this department or building?”
Always-on security telemetry
As endpoints are used, the agent reports key security signals back to Sentel—important system details, new files of interest, and other activity your team wants to track. This becomes the foundation for early detection instead of reacting after damage is done.
Detection powered by Sentel intelligence
Because it is linked to the Sentel Malicious Database and threat engines, the agent can quickly flag files, IPs, and behaviors that resemble known malware, ransomware tools, or other high-risk activity—without waiting for a user to report an issue.
Clear, centralized alerts
When something is detected, Sentel creates a structured alert: which device, which user, which file or indicator, and how serious it is. Your analysts get a single place to review endpoint alerts, group similar incidents, and understand impact.
Guided, remote response
From the Sentel console, security teams can instruct endpoints to take specific actions, such as removing a malicious file. Every action is logged and time-stamped, providing a clear audit trail for investigations and compliance.
A long-term strategic project
The agent is designed to grow alongside the Sentel Framework. Its roadmap includes deeper behavioral analytics, tighter integration with other Sentel modules, and more automation to reduce analyst workload and response time.
