Is it safe to run on a production server?

Yes. The agent only reads local metrics and its own auth logs, and connects outbound over TLS. It opens no inbound ports and has no offensive capability.

Does it work on both Windows and Linux?

Yes. One protocol drives a systemd unit on Linux and a Windows Service, on amd64, arm64 and 386. The installer detects the platform for you.

How is the ingest secured?

Every agent enrolls with a client certificate and streams over mutual TLS. A stolen enrollment token is short-lived and cannot impersonate an already-enrolled host.

How does the two-level config work?

You set global templates once. Each server can override individual keys; overrides cascade on top of the defaults instead of replacing them, so a template change still reaches every host.

Yes. The panel ships as a docker-compose stack behind Traefik with Postgres (TimescaleDB optional). See the deploy guide in the repository.

What does brute-force detection cover?

The agent watches RDP and SSH authentication locally, so it flags an active password-guessing attack and its top source IPs in seconds, even before the panel refreshes.

How does billing work?

The first server is free forever, no card required. Paid plans are billed monthly or yearly: internationally via PayPro Global, in Russia via YooKassa, plus crypto as a fallback. Auto-renewal is on by default and can be turned off any time on the Billing page.

Sentinel — server monitoring for Windows and Linux fleets

One pane of glass for your whole fleet. A lightweight agent streams CPU, memory, disk and network over mTLS, raises alerts on the channels you use, and flags brute-force activity in real time. First server free, no card.