Immediate join alerts
Receive Android push alerts or, while the web console is open, browser notifications when a new, watched or guest device starts a fresh network session.
Network visibility + authorized security validation
Get it on Google Play $9.99 one time
Know what joined.Prove what could be exploited.
Sentinel combines continuous device monitoring with a Raspberry Pi 5 rapid-assessment prototype to help make network risk understandable.
New-device push alertsManufacturer matchingSigned assessment scope
SENTINEL / ILLUSTRATIVE NETWORKObserving
SentinelGateway observer
Hunter’s phoneTrusted
Office printerBrother Industries
New deviceJust joined
Workstation 07Watched
NEW DEVICE DETECTEDEspressif device joined Staff Wi-Fi192.168.10.116 · 8 seconds ago
Raspberry Pi 5 firstNative Linux agent
Android + PWAOne responsive console
Evidence controlledLocal by default
Fast deploymentMinimal client setup
Continuous network watch
Every visible device, explained and remembered.
The always-on agent builds a durable inventory, identifies devices from multiple signals and opens a new session only when a device genuinely returns—so alerts remain useful instead of noisy.
Identity with evidence
Combine hostnames, advertised services, IEEE manufacturer assignments and user labels without overstating uncertain matches.
Network history
Track first seen, last seen, online sessions, IP changes and the evidence source behind every observation.
Coverage you can trust
Clearly show which network segments the appliance can observe and when router integration or an additional sensor is required.
DEVICE INVENTORYStaff network
Live
Observed27
Online now18
Watched3
Unreviewed1
DeviceManufacturerPolicySeen
Reception printer192.168.10.24 · EthernetBrother IndustriesTrustedNow
Conference TV192.168.10.41 · 5 GHzSamsung ElectronicsTrustedNow
Former guest phone192.168.10.87 · Private MACManufacturer hiddenWatch1 min ago
Unidentified device192.168.10.116 · 2.4 GHzEspressif SystemsUnknownJust joined
Illustrative data. Production results show the evidence source and confidence behind each identity.
Authorized rapid assessment
Turn an abstract warning into a result the client can see.
Connect the appliance, verify the signed engagement, run an automatic preflight and demonstrate approved exposure using the client’s own selected workstation and unimportant test material.
01
ConnectOne network cable and private operator control
02
PreflightScope, interface and automatic cleanup verified
03
DemonstrateShort, bounded client-approved scenario
04
ProveFinding, remediation and repeatable retest
01Agent integration
Rogue printer demonstration
Advertise one temporary assessment printer, accept the first client-approved job, and close the capture window immediately.
One job · local encrypted evidence · client-controlled deletion
02Agent integration
Workplace look-alike SSID
Measure whether a user voluntarily joins an authorized look-alike network without deauthentication or forced roaming.
Association behavior · captive-portal outcome · no Wi-Fi key capture
03Prototype ready
Credential-entry behavior
Present a client-approved generic login prompt and record only whether fields were populated and submitted.
Boolean-only evidence · typed values never leave the browser
04Planned
Traffic intelligence profile
Summarize visible DNS, HTTP and TLS destination metadata and identify likely business-critical login services.
Metadata-first · payload retention disabled by default
Raspberry Pi 5 prototype
A field appliance built to arrive ready.
The appliance prototype uses a Raspberry Pi 5, native Go services and local encrypted storage. Appliance control integration is separate from the monitoring and local-scan features available in the current Android app.
Native servicesNo Docker or virtual machine required
Offline-capable scopeSigned engagement rules remain enforceable without cloud access
Local evidence custodyClient documents stay on the appliance by default
Automatic cleanupEvery active scenario has an expiry and stop path
SENTINEL / PI5FIELD PROTOTYPE
Native Go agent
ScopeVERIFIED
EvidenceLOCAL
ExpiryARMED
Client LANDiscovery + authorized tests
Operator consoleAndroid + installable PWA
ASL backendNode.js 26 · Nginx · PostgreSQL
Operator console preview
One place to verify scope, run the timer and stop immediately.
This website includes an interface preview and performs no network actions. Live appliance features require separate integration, signed scope and an authorized operating window.
Scope manifestVerified
Automatic cleanupEnabled
Raw credentialsProhibited
DeauthenticationDisabled
READY FOR PREFLIGHTSelect a scenario above to preview the operator flowActive tests require a paired appliance and signed engagement scope.
Automatic stop2:00
Live evidence streamPreview data
Scope signature verifiedScenario permissions and expiry checked locally
Evidence policy loadedCloud document upload disabled
Awaiting authorized scenarioNo active collection or redirection
Designed for authorized use
The boundary is part of the product.
Sentinel’s assessment edition is built to demonstrate exposure without becoming an unrestricted interception toolkit. The backend signs the scope; the appliance enforces it again locally.
Read ASL’s security approachExact scope
Approved scenario, interface, network, endpoint and expiration are signed before execution.
Hard stop paths
Timer expiry, local emergency stop and cleanup rules terminate active services.
Minimal evidence
Credential simulations retain behavior—not typed passwords, MFA codes, cookies or tokens.
Client-controlled custody
Printed test documents remain encrypted on the appliance and are deleted under the selected policy.
Sentinel pilot program
See the devices. Demonstrate the risk. Prove the fix.
Discuss a Raspberry Pi 5 pilot, a home-network monitor or an authorized rapid assessment for your organization.