Firewall
Catches: A profile switched off after a VPN install and never switched back on.
8 hardening checks · every 15 minutes · Windows fleet
Sentrivox installs a lightweight Windows agent, finds every device on your network, and re-runs eight hardening checks on each one every fifteen minutes. You see what is failing before an auditor or an attacker does.
30-day trial · up to 25 endpoints · no credit card
| Host | FW | DEF | GST | NLA | SMB | PWD | UPD | ENC |
|---|---|---|---|---|---|---|---|---|
| WS-041 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| WS-042 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Fail: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| WS-043 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| SRV-01 | Pass: Windows Firewall active on all profiles | Fail: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| SRV-02 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| LT-118 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Fail: Guest account disabled | Pass: RDP Network Level Authentication required | Fail: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| LT-119 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Pass: Windows auto-update configured | Pass: RDP encryption level high |
| WS-044 | Pass: Windows Firewall active on all profiles | Pass: Defender real-time protection enabled | Pass: Guest account disabled | Pass: RDP Network Level Authentication required | Pass: SMBv1 disabled | Pass: Password policy meets minimum | Fail: Windows auto-update configured | Pass: RDP encryption level high |
Platform · 7 modules
7 modules covering the full lifecycle of IT asset management, endpoint security, and compliance — from discovery through to audit-ready reports.
Continuous security hardening checks across every endpoint. Detects misconfigurations, monitors antivirus status, and generates audit-ready reports automatically.
Produces: 8 hardening checks · pass / fail per host · every 15 min
Auto-discovers hardware, software, and network assets across your infrastructure. Agent-based scans with real-time updates.
Produces: hardware · software · network records
Full lifecycle management with licence compliance tracking, version history, and cost optimisation insight.
Produces: licence status · version history · cost signals
Tracks missing patches across all endpoints and ranks them so your team fixes what is actually being exploited first.
Produces: missing patches ranked by CVSS + EPSS
Blocks unauthorised removable media, whitelists approved devices, and logs all USB activity across the fleet — without the GPO headache.
Produces: allow / block decisions · USB audit log
Manages hybrid infrastructure from one place. Discovers and inventories cloud assets alongside your on-premise fleet.
Produces: AWS · Azure · GCP asset records
Automates compliance checks against the frameworks auditors actually ask for, then exports the evidence.
Produces: ISO 27001 · NIST CSF · CIS reports
Endpoint hardening · 4 critical · 3 high · 1 medium
The agent re-runs all eight every time it reports in — so a firewall someone switched off on Tuesday is on your dashboard Tuesday, not at the next audit.
Catches: A profile switched off after a VPN install and never switched back on.
Catches: Real-time protection paused by a user, or disabled by a third-party installer.
Catches: An enabled guest login — an unauthenticated door onto the machine.
Catches: Remote Desktop accepting connections before the user has authenticated.
Catches: The 1980s file-sharing protocol WannaCry spread through, still enabled.
Catches: Complexity or length requirements never applied to local accounts.
Catches: Updates deferred indefinitely, leaving known holes unpatched for months.
Catches: A remote session negotiated down to a weak cipher level.
Platform preview
The Sentrivox console, built from the same data the agent actually reports. Figures below are a representative fleet, not customer data.
| Device | OS | Last seen | Status |
|---|---|---|---|
| WS-052 | Win 11 | 2 min ago | online |
| LT-118 | Win 11 | 4 min ago | online |
| SRV-04 | Win Srv 2022 | 1 hr ago | late |
| LT-131 | Win 10 | 2 days ago | offline |
Every device, metric, and alert across the fleet in one view.
Sentrivox AI · early access
A security assistant built into the platform. Included from ShieldPro, extended on ShieldBusiness, customised on OmniShield.
Why Sentrivox
hardening checks on every endpoint
between full re-checks
per endpoint, published pricing
free trial, no credit card
“We don’t have a security team”
Most security tools assume an enterprise SOC. Sentrivox works out of the box for one IT admin managing 50 machines alone — the defaults are the recommendation.
“Our data can’t leave our systems”
Agents collect and upload encrypted snapshots to your cloud storage, processed by your pipeline. We never hold your asset data.
“We don’t have weeks for a rollout”
Download the installer, run it on your endpoints, and watch the dashboard populate in real time. No professional services engagement required.
“We’ve been burned on pricing before”
A per-endpoint rate for each fleet size, listed on the pricing page. No per-feature add-ons, no surprise invoices, no lock-in. Cancel anytime.
Frameworks and threat data the platform works with
Pricing · per endpoint, per month
Pick the band your fleet falls into. Annual billing gets you one month free.
For startups and small teams
₹300 per endpoint
For growing IT teams
₹500 per endpoint
For mid-market enterprises
₹650 per endpoint
Unlimited scale and dedicated SOC
from ₹800 per endpoint
Add cloud security for AWS, Azure and GCP from ₹4,000 per cloud account / mo — bundle both platforms and save 15%.
30-day free trial · up to 25 endpoints · no credit card · prices in ₹ INR, exclusive of GST
The Problem
Without real-time asset intelligence, security teams spend more time on triage than on prevention. Sentrivox changes that.
The Sentrivox Way
A lightweight agent runs on every endpoint. It collects, checks, and reports — so your dashboard always reflects reality.
Led by Rutuja Mali, Founder & Managing Director and Santuk Joshi, Managing Director — Sentrivox on LinkedIn.
FAQ
Early Access
Join the waitlist. Beta users lock in 40% off for life — no credit card required.