The Departing Engineer
Two weeks notice, six years of context, full repo access. Most companies find out three months later when a competitor ships their feature.
Detection mean: 277 days
Insider Risk Management · Built for engineering teams
Your code walks out the door with the people who write it.
Sentra observes every clone, every download, every push — and blocks the ones that don’t fit who you are or what you do. Without slowing down a single legitimate commit.
0
Time-to-first-signal
minutes · no agents
0
Avg decision time
seconds · block → resume
0
Forensic retention
months · SOC 2 ready
The reality
The biggest data breach you’ll ever have already has a username and password.
83% of companies faced an insider incident last year. Your EDR catches ransomware. Your DLP blocks email. Neither sees the developer who quits on Tuesday and clones thirty-seven repositories on Monday night.
The Misrouted Manual QA
Has access to half the org by accident. Doesn’t know what’s normal. Curls a zip of monorepo/main once and you’ll never see it again.
Detection mean: never
The Compromised Contractor
Their laptop is in a coffee shop. Their VPN credentials are on Telegram. Your audit log says everything looks fine.
Detection mean: post-breach
83%
of orgs hit by an insider incident in 2024
$4.45M
average cost of an insider breach
277 d
mean time to detect a malicious insider
Live operations theatre
A live look at who touches what — across your code, files and data.
Every dot is a person. Every line is a request. Watch normal traffic flow through Sentra — and what happens the moment something doesn’t fit. Hover users to inspect. Click “Trigger intrusion” to inject an external connection.
LIVE FEED0active users0events / min0peak risknormalelevatedblockexternal
SENTRAPROTECT
UNSANCTIONED CONNECTION DETECTED
How it works
Three layers. One platform. Zero noise.
From OAuth to live blocking in eleven minutes. No agents. No kernel modules. No quarterly procurement cycle.
01
Step 01Connect
Install our GitHub App. OAuth your Google Workspace. Point us at your S3 buckets. Average time-to-first-signal is eleven minutes.
~ 11 minutes02
Step 02Learn
For 14 days Sentra watches in silent mode. It builds a behavioral fingerprint for every person — their hours, their repos, their volumes, their devices.
~ 14 days silent03
Step 03Defend
When something doesn’t fit, we don’t email a ticket. We block the action, freeze the session, and send a Slack card with three buttons: Approve, Deny, Investigate.
~ 47 s avg decisionSix modules
Built for the way attacks actually happen in 2026
Six interlocking sensors. One behavioral brain. One platform. Pick the modules you need; pay for what you turn on.
Git Sentinel — knows the difference between a pull and a heist.
Every clone, fetch, archive download, force-push and SSH-key change across GitHub, GitLab, Bitbucket, Azure DevOps and self-hosted. The Volume Gate stops the “I’ll just clone the whole org” pattern at three repositories. Or one. Or any number you set.
Storage Sentinel
Drive, OneDrive, Dropbox, S3, NAS — one ruleset. Mass downloads, rclone mounts, public-link sharing.
Behavior Engine
Role-aware baselines, not stupid heuristics. A backend engineer in payments has a different fingerprint than a junior frontend.
Ransomware Shield
Three-layer defense — entropy, canaries, velocity. Catches mass encryption in under thirty seconds.
Response Orchestrator
Block first. Ask questions in Slack. Approval cards, WebAuthn step-up, token revocation, auto-rollback.
Forensic Console — 60 seconds from alert to “what happened.”
Full timeline, data lineage, related events, exportable PDF for legal, push to Splunk / Sentinel / Datadog.
Live attack simulation
See it block an attack. In your browser. Right now.
No signup. No email. Pick a scenario, press play. We replay an actual recorded session, anonymized.
Anatomy of a block
From signal to stopped attack in seconds
Pick any IT role. Sentra plays back the exact step-by-step the platform takes when that person crosses a behavioral line.
Engineering
Product · BA · PM
Design
Ops · SRE · Departures
Go-to-market
Corporate
External threat
- 14:32
Login
Anna Korol logs into GitHub from her usual IP. Behavior Engine: baseline OK.
IP knownRisk 8 - 14:33
First clone — qa-test-suite
Within her normal scope. Routine ticket prep, no flags raised.
Scope OKRisk 8 - 14:35
Off-role clone — payments-api
Role mismatch flag fires. Manual QA never clones payments. Logged, dashboard warning.
Role mismatchRisk 42 - 14:36
Volume Gate triggered
4 repos in 3 minutes. Limit is 3. PAT revoked. Session frozen. Slack card sent.
Hard blockRisk 78 - 14:37
Manager investigates
Sergey opens forensic console. Sees ticket QA-4711 explains the access. Approves 60 min.
ApprovedAudit logged
Vs the rest
We’re not another DLP, UEBA or EDR. Here’s what we are instead.
One platform that sits where the others can’t — between your Git provider, your storage and your behavior model.
Pricing
Priced for engineering teams, not for procurement.
No hidden seat fees. No per-feature unbundling. No “contact sales for everything.” Cancel anytime, even on annual plans.
MonthlyAnnual −20%
Free
$0
forever · up to 5 devs
1 GitHub org · 1 private repo
Rule-based baseline
7-day forensic retention
Community support
Unlimited public repos
Team
$8
per seat / month · 10–50 devs
1 Git provider · 1 storage
Simple ML baseline
30-day forensic retention
Email support · 24 h SLA
Self-serve, no sales call
Business
$18
per seat / month · 50–500 devs
Unlimited Git · 3 storage providers
Advanced role+project ML
Ransomware Shield included
Approval playbooks · Slack / Teams
13-month retention · SOC 2 ready
Enterprise
from $28
per seat / month · 100+ devs
Self-hosted · BYOK keys
Custom ML models
7-year retention · DPA · 99.99% SLA
24/7 dedicated CSM
Volume tiers from 250 / 500 / 1k seats
How much does it cost for your team?
Slide the bar. We’ll show your monthly and annual cost on the BUSINESS tier — and how much you save vs Teramind UAM and Cyberhaven (their listed mid-market pricing).
100
Developers
Sentra Business · annual
$17,280
$1,440 / month
Teramind UAM equivalent
$30,000
save $12,720 / yr
Cyberhaven equivalent
$54,000
save $36,720 / yr