Endpoint-aware network security

Every device on your Wi-Fi.
One console that answers for it.

Sentinel Console reads the traffic your protected computers report, blocks what you decide is off limits, and calls out phishing before anyone clicks. Phones and tablets need nothing installed.

14-day trial · Windows agent installs in one line · no card required

What it does

Everything a small network needs, in one place.

No browser extension, no cloud proxy in the middle. A light Windows agent enforces policy on the machine and reports what it sees; the console turns that into decisions.

Traffic you can read

Every request a protected computer reports, with category, action, device and size — filterable and paged, never invented.

Block rules that hold

Block by domain, keyword, category, application or address. Allow-list overrides, per-device scope, live hit counts.

Device control

Cut a computer off the internet or refuse USB storage with one click; the agent applies it on its next check-in.

Wi-Fi discovery

Your agent sweeps the local network, so phones, TVs and printers show up in the console without an install.

Screen time per device

Time spent on social platforms for each phone, measured from your router's own DNS log — no app on the phone.

Phishing guard

Sender authentication, lookalike domains, link tricks and dangerous attachments scored before the click.

Alert queue

Critical to low severity, with the detail that explains the risk and one tap to resolve or reopen.

Workspaces per client

Each client sees only its own devices, traffic and alerts; licensing and trial state stay with the operator.

How it works

From a single command to a full picture.

  1. 01

    Install once

    One PowerShell line on each Windows computer. The agent adds its own folder to Defender exclusions and checks in.

  2. 02

    Agent enforces

    Blocked domains, applications and USB state are pulled every minute, then applied on the machine itself.

  3. 03

    Network is measured

    The agent's LAN sweep lists every host on the Wi-Fi; your router's DNS log fills in per-phone screen time.

  4. 04

    Console decides

    Requests, blocks, verdicts and alerts arrive in one workspace, scoped to the client that owns them.

Requests

host, category, action, bytes

Blocks

rule, device, hit count

Verdicts

sender, score, reasons

Mail guard

Catch the message before it costs someone.

Paste a suspicious message into the console, or let the agent check the newest Outlook mail at sign-in and raise a warning on the desktop. Every verdict explains itself.

  • Sender authentication: failed SPF, DKIM and DMARC are scored, not ignored.
  • Lookalike senders: typo and Unicode domains impersonating banks, couriers and big brands.
  • Attachment traps: .pdf.exe double extensions, macros, scripts and archives.
  • Link and pressure cues: disguised URLs, credential asks, urgency and money.

Phones without agents

Know the phones on the Wi-Fi, without installing on them.

Nobody wants software on a personal phone. Sentinel Console lists every host your agent can see on the local network — name, address, hardware address and when it was last around — and attributes social-media time to each one from the DNS lookups your router already answers.

Discovery needs no phone app

An installed Windows agent sweeps the subnet and reports the hosts it finds.

Screen time needs your router's DNS log

Point the router, Pi-hole or AdGuard Home log at the console and five-minute activity slots become minutes per platform. Nothing is collected from the phone itself.

Wi-Fi devices · today

Living room TV

192.168.1.24 · YouTube

1h 20m

iPhone · Sara

192.168.1.31 · Instagram

48m

Pixel · Omar

192.168.1.34 · TikTok

1h 05m

Study printer

192.168.1.51 · no social

—

Sample layout. Real rows appear once an agent reports and the network's DNS feed is connected.

Put your network under one console.

Create an account, get a trial workspace, install the agent on one computer and watch the first requests land.