anandsureshworks
Security · network
net‑sentinel
A deny‑by‑default outbound monitor. Every connection your machine makes is matched against a learned allowlist — plaintext is flagged, first‑seen anomalies are caught, and nothing is trusted by default.
Loading…
Posture
The safe, aggregate view from the live engine — no addresses, no processes. This is all it ever exposes.
A scan, walked through
Illustrative connections (documentation IPs). Watch the policy decide: allow what's known, deny plaintext & unlisted, alert on the genuinely new.
| Process | Destination | Port · proto | Verdict |
|---|
How it works. net‑sentinel is a stdlib‑only engine that watches outbound sockets, matches each against a learned allowlist, and tiers anything unmatched (INFO / WARN / CRITICAL). It's deny‑by‑default: an endpoint earns trust, it isn't granted it. Output is an atomic JSON with a
This page is an illustrative demo: synthetic data over documentation IP ranges. A live version would surface only the aggregate posture above — never a real connection. ← back
generated_at freshness contract — no cloud, no secrets, nothing leaves the host.
This page is an illustrative demo: synthetic data over documentation IP ranges. A live version would surface only the aggregate posture above — never a real connection. ← back