Air-gapped deployment
Running Sentrasec with no internet connectivity at all, against a signed intelligence snapshot.
Air-gapped deployment runs Sentrasec entirely disconnected, against a signed snapshot of the security knowledge and detection rules. Scanning, reasoning, evidence and compliance all work offline.
This is a configuration of the same product, not a reduced edition.
What differs
| Connected | Air-gapped | |
|---|---|---|
| Scanning | Same | Same |
| Deduplication | Same | Same |
| Reasoning | Same | Same |
| Explanations | Same | Same |
| Intelligence | Live | Signed snapshot |
| Updates | Continuous | On your transfer schedule |
The only real difference is how recent the shared security knowledge is.
How intelligence arrives
Instead of a network connection, your deployment receives a signed, versioned snapshot containing detection rules and vulnerability data. You transfer it across the air gap using whatever process you already trust, and load it into the deployment.
Snapshots are signed, and verification is part of loading one. This matters: a snapshot determines what your scanners detect, so an unverified one is a supply chain risk. Loading is atomic, and previous snapshots are retained so you can roll back.
Update cadence
Snapshots are published on a regular cadence, with out-of-band releases when a significant vulnerability warrants one. You choose how often to transfer them: monthly is typical, quarterly is defensible for stable systems, and anything longer means scanning against knowledge that has meaningfully aged.
Verifying what a scan used
Every scan records the snapshot version it ran against. This matters for audit: when a finding is questioned a year later, that version tells you exactly what the engine knew at the time.
Limitations
Genuinely absent offline:
- Live vulnerability data between snapshot transfers.
- Cloud posture scanning against providers you cannot reach.
- Outbound notifications to hosted services.
Everything else works exactly as it does connected: every scanner, the full reasoning layer, evidence generation and compliance reporting.
Getting set up
Air-gapped deployments are handled as part of the commercial engagement, including transfer procedures and update cadence suited to your environment.
Talk to us about an air-gapped deployment.