SENTRADOCSSign in

SENTRA AI Threat Shield (ATS)

What changed in each version of SENTRA AI Threat Shield (ATS).

Newest first. Latest version: v2.26.0.

v2.26.0 · 2026-10-27#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Roles are fully yours: a Master Admin creates, renames, changes and deletes roles with any mix of permissions (Admin › Users & roles › Roles & permissions), in one permission table
  • Finer permissions: User accounts, Audit ledger, Backups & restore, System & alerts and Licence & updates can each be given to any role (before, only Master Admins had them)
  • Guardrails: Master Admin always has everything and can't be changed; at least one Master Admin stays; a role in use is deleted only after choosing where its users go; someone who manages users never hands out more than they hold; every change is in the audit ledger
  • Upgrade keeps everyone's access exactly as it was: Admin and Analyst become editable roles, and Admins who had only some grants get a role with exactly those grants
  • GUARD roles (admin, operator, viewer) map to any local role, set on the box
  • Customizable Overview: each user picks the widgets, their order (drag or arrows) and size, saved on the shield; Reset to default; anyone with System & alerts sets the default layout for everyone
  • New Overview widgets: requests per second over the last minute, top flagged countries, licence status

v2.25.1 · 2026-10-27#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Updates: the update source is now a clear choice between "SENTRA release server" and "Developer source", with the one in use ticked; switching shows "switching…" and the page updates by itself when done
  • On a box with no git checkout only the release server is shown

v2.25.0 · 2026-10-27#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Signed releases: a stand-alone shield now takes updates from the SENTRA release server (updates.sentra-ai.com) and installs a release only after checking it end to end: SENTRA root key, release key, signed release list, package and every file.
  • A release that fails any check is refused ("signature check failed") and nothing changes; a withdrawn release is never offered, and the console warns when the running version was withdrawn.
  • Admin › Licence & Updates › Updates shows where updates come from and switches between the SENTRA release server and a developer source (git). Boxes installed from a git checkout keep that source until switched; new installs use the release server.

v2.24.0 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Stand-alone updates: a shield that no SENTRA GUARD manages now watches GitHub every 30 minutes and offers a new release in Admin › Licence & Updates › Updates, with what's new.
  • Nothing is installed until an admin clicks Update now or schedules it; the update runs in its own job so the restart can't cut it off, and the result is recorded.
  • Check GitHub now from the console, or with sudo sentra-shield-setup updates.

v2.23.0 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Online licence check-in: when the shield can reach the internet it checks in with the SENTRA licensing authority (licensing.sentra-ai.com) about 2 minutes after it starts and then every 6 hours.
  • The licensing authority can revoke a key: the key then shows as REVOKED ("Revoked by the SENTRA licensing authority") and stays so after restarts until a later check-in lifts it.
  • Renewed keys held by the licensing authority for this shield are added automatically, through the same checks as a key pasted by hand.
  • Admin › Licence & Updates shows "Verified online with the SENTRA licensing authority … ago", "Not verified online yet" or why the last check-in failed, with a Check in now button.
  • New command: sudo sentra-shield license check.
  • Offline shields keep working exactly as before: a failed check-in never restricts anything. Switch the check-in off with SENTRA_LICENSING_CHECK=0 or "licensing_check": false in the settings.

v2.22.0 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Accepts licence keys issued by a licensing authority (OTG2- keys): a SENTRA VIEW or GUARD certified by SENTRA can now issue SENTRA licences within its own limits.
  • An OTG2 key is checked offline: the authority's certificate must be signed by SENTRA, the key must be signed by that authority, be for this product, stay within the authority's modules and dates, and not run past its latest allowed expiry.
  • Keys issued while an authority was valid stay valid after the authority's certificate ends.
  • Clear reasons when a key is refused (for example "This key was issued for another SENTRA product"); existing OTG1- keys keep working as before.

v2.21.0 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Central sign-in from the managing SENTRA GUARD: GUARD accounts sign in with their GUARD password and two-factor, and keep working with their last-known access if the GUARD link drops.
  • GUARD roles map to the shield's roles: admin is Master Admin, operator is Admin with every protection clearance (no users, licence, backup restore or updates), viewer is Analyst (read-only).
  • Password and two-factor of a GUARD account are changed on the GUARD; the shield says "Managed by GUARD … change it there".
  • The GUARD can switch local accounts off: local users then cannot sign in and none can be added; they are kept and come back when the GUARD lifts the lock.
  • New glass-break account (sudo bash sentra_shield_setup.sh glassbreak ): full admin only while the shield has lost its GUARD; every use is audited and alerted, and a red banner shows while it is signed in.
  • Sessions end on the next click when the GUARD removes or switches off a user, changes their password, or when the GUARD link comes back during a glass-break session.
  • The GUARD's lockout policy (attempts and minutes) and minimum password length apply on this shield.
  • Admin › Access shows who manages access (GUARD name, link up/down, last sync, local accounts on/off) and a Source column (GUARD, Local, Glass-break); the sign-in page says "Sign in with your GUARD account".

v2.20.0 · 2026-10-27#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Menu reorganised with plain names: Shield › Websites (edge status, websites, connection limits, human check) replaces Tools › Edge; old links to Edge still open it.
  • Sign-in rules (two-factor for every user, dashboard only from chosen networks) moved to Admin › Access.
  • New Admin › Backup & Restore page: backups on this server, back up now, restore, schedule and the extra destination.
  • New Admin › System page: box name with Rename, operating system, kernel, virtualisation, processor, memory, swap, disks, network ports, uptime, software versions and service status.
  • Admin › Licence is now Licence & Updates, with an Updates tab: see what is new, update now, schedule an update or skip a version offered by your SENTRA GUARD.
  • The header shows a blinking UPDATE AVAILABLE sign when the GUARD offers a newer version; click it to open the Updates tab.
  • Admin › Ledger is now called Audit ledger.

v2.19.1 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • The installer now copies the reports module, so reports work again after an upgrade.

v2.19.0 · 2026-10-26#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Report builder: choose the sections, period and websites for a report.
  • Saved reports with schedules (daily, weekly, monthly) e-mailed as PDF-ready pages and CSV.
  • Report archive with retention, downloads and delete.
  • New report sections: ban history and performance samples.

v2.18.1 · 2026-10-24#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Every action button is locked to the clearance it needs.

v2.18.0 · 2026-10-24#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Breached-password check at sign-in (only 5 characters of a hash leave the server).
  • CMS hardening packs, known-exploited (KEV) coverage and a Page Shield CSP pin.

v2.17.0 · 2026-10-24#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • DNS and e-mail posture check, and an honest SENTRA coverage section in the assessment report.

v2.16.0 · 2026-10-24#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Cookie hardening, hidden directory listings, admin-zone presets and network (ASN) blocking.

v2.15.2 · 2026-10-23#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Scanner tools install Nuclei and theHarvester from their own releases.

v2.15.1 · 2026-10-23#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Backups in the dashboard.

v2.15.0 · 2026-10-23#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Extra backup destination (S3-compatible, SFTP or a folder) for a standalone shield.

v2.14.0 · 2026-10-23#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Assessment: built-in web vulnerability checks, PHP2Shell exposure and Nuclei.

v2.13.0 · 2026-10-23#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Virtual patch for PHP2Shell (CVE-2026-109618, CVE-2026-109619).

v2.11.0 · 2026-10-20#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Page Shield: watches the scripts your pages load for supply-chain changes.
  • API Shield (2.10.0): schema validation for API routes.

v2.9.0 · 2026-10-20#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Cross-model disagreement telemetry (detects probing of the AI checks).
  • Deterministic AI policy compiler (2.8.0) and the tamper-evident audit ledger (2.7.0).
  • Fix (2.8.1): the installer copies the new feature modules.

v2.6.0 · 2026-10-20#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Assessment tools: passive Recon & OSINT and a gated Active test.
  • Unified Scanner, Overview board, menu with groups and backup settings (2.5.0).

v2.4.3 · 2026-10-20#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Security scan (passive vulnerability and posture check), resilience demo, the SENTRA website and go-live pack (2.4.0 to 2.4.3).

v2.3.1 · 2026-10-19#

Downtime The shield restarts for about 10 seconds; websites keep working through the restart.

  • Good-agent passport hardening, Engine page and deep inspection (2.3.0, 2.3.1).
  • Bot Scorecard and page guard (2.2.0).
  • Swarm defence: sensor, toolkit fingerprint and forward containment (2.1.0).