Documentation
Everything needed to run Sentrasec, from a first scan on a laptop to a self-hosted deployment.
Sentrasec scans your apps, imports findings from the scanners you already use, triages every finding from application evidence, and writes remediation plans and test plans your coding agent can carry out. This documentation covers running it, integrating it and deploying it.
Start here
If you have never run Sentrasec before, the quickstart takes you from installation to a first set of findings in a few minutes. It needs nothing but a terminal and a repository.
If you want to understand the model before running it, start with core concepts.
How the documentation is organised
- Getting started: installation, a first scan, and the concepts the rest of the docs assume.
- Scanning: running scans, configuring them, and wiring them into CI.
- Interfaces: the CLI, the MCP server and the REST API.
- Deployment: self-hosting and restricted environments.
- Reference: the roadmap.
Other documentation sites
Two interfaces have their own dedicated documentation, kept alongside their release cycles:
- cli.sentrasec.ai: full CLI reference, every flag and exit code.
- mcp.sentrasec.ai: MCP setup guides for each supported client.
Getting help
The open-source deployment is public. Issues and discussions live on GitHub, and there is a community Discord for questions that are faster to ask than to file.