Vulnerability Management v1.0.1-beta

SentinelCore

Reconstruct any LAN as a living map. SentinelCore discovers every host via ARP-scan and nmap, draws them as a real-time topology graph, and correlates detected services against the CVE feed as they appear. A Rust backend does the scanning and scoring; a React console renders the graph, severity badges, and per-host remediation plans.

Capabilities

What ships in the box

Risk-based reprioritization

The scoring engine re-ranks every finding beyond raw CVSS: it blends EPSS exploit probability, business impact, asset exposure, and known-exploit intelligence into a single 0–100 risk score.

Priority tiers with SLAs

Scores map to P1–P4 tiers with automatic remediation SLAs — Critical in 24 hours, High in 7 days — so the queue reflects real urgency, not just severity labels.

Active discovery

ARP-scan sweeps the subnet, nmap fingerprints services and OS, hosts appear on the graph within seconds.

Live topology

Device nodes with domain-specific icons, thin connecting lines, and a status legend — pan, zoom, and edit links.

CVE correlation

Matches detected versions against a bundled offline CVE database. Refresh the feed manually in air-gapped sites.

Remediation plans

Per-host plans ranked by risk score, with skill-based auto-assignment to the right engineer and export as a work order for the operations team.

Minimum requirements

Operating system
Debian 13 · trixie / x86_64
CPU
4 vCPU · x86-64-v2
Memory
4 GB RAM · 8 GB for > 500 hosts
Disk
20 GB SSD · thin-provisioned
Network
1 NIC · L2 access to scan targets
Console
HTTP :80 · modern browser
Downloads

Choose your format

Every artifact is GPG-signed and published with a detached SHA256 checksum. Verify before you install.

.tar.gz Debian install 14 MB
sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz
SHA256f65d645fe9d14db3…c2d5c3ea
SignedGPG · ASC signature included
TargetDebian 13 trixie · x86_64
.ova VirtualBox / VMware 645 MB
sentinelcore-v1.0.1-beta-linux-x86_64.ova
SHA2564e175021b47ec0f0…5264bd11
ApplianceDebian 13 · 20 GB · bridge NIC
ImportFile → Import Appliance
.qcow2 KVM / Proxmox 671 MB
sentinelcore-v1.0.1-beta-linux-x86_64.qcow2
SHA2566457a2e008350b68…76aead25
Formatqcow2 · virtio · Debian 13
Importqm importdisk / virt-manager
Quick install

Choose your format

The installer handles all dependencies, the database, nginx, and the systemd unit. You need a clean Debian 13 trixie host and root access — nothing else.

1

Download the tarball and the checksum

Save both files in the same directory on the target server.

bash
wget https://dognet-technologies.online/downloads/sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz
wget https://dognet-technologies.online/downloads/sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz.sha256
2

Verify the checksum

The command should print sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz: OK. If it fails, re-download.

bash
sha256sum -c sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz.sha256
3

Extract the archive

bash
tar -xzf sentinelcore-v1.0.1-beta-linux-x86_64.tar.gz
cd sentinelcore-v1.0.1-beta-linux-x86_64
4

Run the installer as root

install.sh installs PostgreSQL, nginx, nmap, arp-scan, applies all migrations, configures nginx on port 80, registers the systemd unit, starts the service, and creates the first admin user — automatically, with no prompts.

bash
sudo ./install.sh
5

Read the credentials printed at the end

When install.sh finishes it prints the console URL and the generated admin password. Copy the password before closing the terminal — it is not stored anywhere.

example output
   URL:        http://192.168.1.10
   Admin:      admin  /  Xk7mR9qP2vAa1!
   ⚠️  CAMBIA questa password al primo accesso.
6

Open the console and change the password

Navigate to http://<server-ip> in a browser on the same network. Log in with admin and the generated password, then go to Settings → Profile and set a permanent password.

bash — verify service is running
sudo systemctl status sentinelcore