Platform
One security platform. Four ways in.
Sentrasec scans your projects, triages every finding, and writes remediation plans your coding agent can carry out. Whichever surface you use, you are working with the same findings and the same decisions.
Four surfaces, one platform
Different people need different ways in. All four connect to Sentrasec Core, so everyone sees the same findings and decisions.
Four ways in
Investigate and decide
Console
The web app at console.sentrasec.ai. Add apps, run scans, import findings, read triage decisions with their evidence, and see how records map to compliance controls.
For: Security analysts, executives, auditors
Connect applications and workflows
API
The interface the web app and CLI are built on. Pull findings into your own reporting, or connect Sentrasec to the systems you already run alongside the GitHub, GitLab, Jira, Linear, Slack, Microsoft Teams, webhook and email integrations.
For: Platform and security engineering
Run locally and in CI
CLI
Scan from a terminal or a pipeline and get results in the same place the work is happening. The same checks locally and in CI, so nothing is a surprise at review time.
For: Developers, CI/CD pipelines
Bring security into coding agents
MCP
Findings, remediation plans and test plans delivered to Claude Code, Cursor, Codex, Windsurf, GitHub Copilot and VS Code. The agent makes the change and runs the tests, without anyone leaving the editor.
For: AI coding agents, IDEs
What you get out of it
Security work and compliance records from the same activity, so you do the work once.
Find what matters
SAST, SCA, secrets, IaC, container and DAST scans, plus findings imported from your existing scanners, reported as one deduplicated set rather than several disconnected ones.
Understand it
Triage marks each finding remediate or defer from evidence in your project: reachability, attacker-controlled input, whether the code ships, and compensating controls.
Remediate it
Findings that need action get a remediation plan and a test plan. Your coding agent receives them over MCP, makes the change and runs the tests.
Prove it
Scans, triage decisions, remediation plans and re-scans kept as records and mapped to SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR and DORA controls.
Two ways to run it
Start on Sentrasec Cloud, or run Sentrasec inside your own environment.
Sentrasec Cloud
Start with a 30-day free trial
Add a project, connect its repository, and get triaged findings. Nothing to install or operate. The trial covers 2 projects with full platform access.
- 30-day free trial, 2 projects, 1 user
- No infrastructure to manage
- Team plan: $249/month, 5 projects, 10 users
- Enterprise plans for larger estates
Self-hosted
Entirely in your environment
Run Sentrasec inside your own environment from the open-source deployment. Your code, your findings and your records stay within your boundary.
- Code and findings inside your boundary
- Your retention and backup rules
- Deployed with Docker
- Planned with us at onboarding
Not sure which fits?
Tell us about your environment and constraints, and we will tell you which option makes sense.