Skip to content
sentrasec

Documentation

Everything needed to run Sentrasec, from a first scan on a laptop to an air-gapped enterprise deployment.

Sentrasec is an application security platform built around native scanners, a security knowledge graph and contextual reasoning. This documentation covers running it, integrating it and deploying it.

Start here

If you have never run Sentrasec before, the quickstart takes you from installation to a first set of findings in a few minutes. It needs nothing but a terminal and a repository.

If you want to understand the model before running it, start with core concepts.

How the documentation is organised

  • Getting started: installation, a first scan, and the concepts the rest of the docs assume.
  • Scanning: running scans, configuring them, and wiring them into CI.
  • Interfaces: the CLI, the MCP server and the REST API.
  • Deployment: self-hosting and air-gapped operation.
  • Reference: the roadmap.

Other documentation sites

Two interfaces have their own dedicated documentation, kept alongside their release cycles:

Getting help

The scanner engine is open source. Issues and discussions live on GitHub, and there is a community Discord for questions that are faster to ask than to file.