█ self-hosted :: free to use :: v1.3.0

KNOW YOUR SERVERS.
STOP THE THREATS.

> GRID::SENTINEL is a lightweight self-hosted monitoring platform. Real-time SSH attack detection, nginx error tracking, and system metrics. Deployed in minutes with a single curl command.

[ Get started free ] [ See pricing ]

runs on any vps :: your data never leaves your servers

GRID::SENTINEL / OVERVIEW
OVERVIEW SECURITY METRICS ADMIN
auto-refresh every 30s ↻ REFRESH
Blog VPS ● ONLINE
blog-vps
CPU
1%
MEM
16%
DISK
23%
uptime: 44d 7h
Sentinel Hub ● ONLINE
sentinel-hub
CPU
1%
MEM
33%
DISK
10%
uptime: 1d 1h
Security Events ● live
SSH Failed password root from 185.220.101.45
NGX GET /wp-admin 404
SSH Invalid user admin from 45.142.212.18
sys::pipeline

HOW IT WORKS

From zero to full server visibility in under five minutes.

step_01.sh
01
$ docker compose up -d

Deploy the hub

Run the hub on any VPS with Docker Compose. It provisions a private CA and generates certificates automatically.

step_02.sh
02
$ admin > [ PROVISION SERVER ]

Provision each server

Click PROVISION SERVER in the Admin module (or run one make command if you prefer the CLI). Either way the server is registered and the install command is printed for you.

step_03.sh
03
$ watch -n1 dashboard

Watch the dashboard

Open the dashboard in any browser. Server cards appear immediately. SSH attacks and nginx errors stream live as they happen.

sys::modules

EVERYTHING YOU NEED.
NOTHING YOU DON'T.

Built for developers and sysadmins who want real visibility without the enterprise complexity.

> load_module ssh_watch [OK]

Real-time SSH detection

Failed passwords, invalid users, publickey failures. Captured from the systemd journal as they happen, not on a cron schedule.

> load_module ngx_errors [OK]

Nginx error tracking

4xx and 5xx responses captured with method, path, and status. Spot abuse patterns, broken routes, and misconfigurations at a glance.

> load_module metrics [OK]

CPU / mem / disk metrics

Per-server resource snapshots on every heartbeat. History charts on click so you can see load trends before they become incidents.

> load_module mtls [OK]

mTLS by default

Each agent gets a unique client certificate signed by the hub's private CA. nginx rejects any unsigned connection. No open endpoints.

> load_module one_liner [OK]

One-liner agent install

Provision a server from the hub with one command. It signs the cert, registers the server, and prints a curl command ready to paste.

> load_module your_data [OK]

Your data, your servers

The hub runs on your VPS. Data lives in SQLite on your own disk. No cloud accounts, no telemetry. Export a backup from the dashboard anytime.

[PRO]
> load_module findings [OK]

Security findings kanban

Track vulnerabilities across your entire infrastructure in one board. Each finding carries a CVSS score, OWASP reference, severity, and notes. Move findings through Open, In Progress, Resolved, and Accepted Risk columns as you remediate.

sys::visual_feed

SEE IT IN ACTION

GRID::SENTINEL runs a retro terminal aesthetic by design. This is what you get after a five-minute deploy.

sys::license

SIMPLE PRICING

The core product is free forever. Pay only for the features that save you time.

free_tier.lic
Free
$0 forever

Everything you need to monitor your own servers.

  • [+] Unlimited agents
  • [+] SSH attack detection
  • [+] Nginx error tracking
  • [+] CPU / mem / disk metrics
  • [+] mTLS per-agent authentication
  • [+] One-liner provisioning
  • [+] Self-hosted hub (Docker)
  • [+] 30-day event retention
  • [+] Community support
  • [+] Free for personal and commercial use
[ Get started free ]
Most popular
pro_tier.lic
Pro
$9 /month

Alerting and extended retention for when it matters.

  • [+] Everything in Free
  • [+] Email alerts PRO
  • [+] Slack alerts PRO
  • [+] Webhook alerts PRO
  • [+] 365-day event retention PRO
  • [+] Security findings kanban (CVSS + OWASP) PRO
  • [+] Priority support PRO
  • [+] Cloud-managed hub (coming soon) PRO
[ Get Pro ]
sys::deploy

GET STARTED IN MINUTES

Three commands. Full visibility.

01 :: deploy_hub on your VPS 
# Download and start
curl -fsSL https://gridsentinel.pro/hub.tar.gz | tar xz
cd sentinel
docker compose up -d
02 :: provision_server pick your interface, same result
gui :: point_and_click Admin module

Open ADMIN in the dashboard and hit the button. Fill three fields, done.

PROVISION NEW SERVER ×
SERVER ID
myserver
DISPLAY NAME
My Server
COLOR
[ PROVISION ]
✓ API key generated (shown once)
✓ Install one-liner ready to copy
cli :: for_the_junkies from the hub

SSH'd into the hub anyway? One make target does the same thing. 

make provision ID=myserver \
  NAME="My Server" COLOR="#7aecff"

# Output:
✓ Server registered: myserver
✓ API key (shown once): <KEY>
→ Run on myserver:
  curl -fsSL https://gridsentinel.pro/install.sh \
    | sudo bash -s -- \
      --hub https://gridsentinel.pro \
      --id myserver \
      --key <KEY>

> Both paths register the server and print the same install command. No cert leaves the hub: the agent generates its own keypair in step 3.

03 :: install_agent on the monitored server 
# Paste the command from step 2 on the target server
curl -fsSL https://gridsentinel.pro/install.sh | sudo bash -s -- \
  --hub https://gridsentinel.pro \
  --id myserver \
  --key <KEY>

✓ sentinel-agent installed and running

Then open the dashboard and watch your servers appear.

[ Read the full docs ]
sys::readme

LIGHTWEIGHT BY DESIGN. YOURS BY DEFAULT.

GRID::SENTINEL exists because setting up Prometheus, Grafana, and Alertmanager just to know if a VPS is down is overkill. A lightweight Python agent and a FastAPI hub is enough. It runs on hardware you control and stores data you own.

GRID::SENTINEL is not open source, but it is free to use. The code stays ours; the deployment, the data, and the hardware stay yours. Nothing is sent to our servers, ever. Pro adds the features that save time: alerts, longer retention, and the security findings board, at a price that keeps the lights on.

>> compare_plans