About SentriKat
We're on a mission to simplify vulnerability management by starting from what actually matters: the software you run, and the vulnerabilities attackers are exploiting in it.
Our Story
SentriKat was born from a simple observation: security teams are drowning in CVEs. With over 250,000 vulnerabilities and thousands more added each year, traditional vulnerability management has become an exercise in futility.
We asked ourselves: what if, instead of a list of every CVE, you got the ones in the software you actually run, on the machines that have them, with the ones attackers are using first? That's the core of SentriKat's engine.
SentriKat was built from the ground up to cross-check several threat intelligence, automatically correlating your software inventory with known vulnerabilities, the exploited ones first. No more alert fatigue. No more prioritization paralysis. Just actionable intelligence about the threats that matter.
Engineered in Europe and designed for European data sovereignty, SentriKat can run on your own infrastructure. With NIS2 now in force across the EU, we built native European vulnerability intelligence and multi-source severity enrichment so your vulnerability management never depends on a single database, or a single continent.
Meet the Founder
Thirteen years in systems and security engineering, and in the development around both: running the infrastructure, writing the tooling, and owning vulnerability management in companies while they grew. Several of those years were spent in Berlin's startup scene, on teams where the gap between "what the security tool reports" and "what actually matters" kept getting wider.
The turning point came in my previous role, when I inherited a vulnerability management stack built on enterprise tools that cost tens of thousands of euros per year and produced dashboards with 40,000+ open CVEs nobody would ever fix. The security team was demoralized. The developers ignored the reports. The auditors demanded evidence. Meanwhile, the actually exploited vulnerabilities, the small subset that threat actors were really using, were buried under noise.
I left to build something different, from Italy. SentriKat is the tool I wish I had back then: built to put vulnerabilities with confirmed real-world exploitation first instead of burying them, priced so small and medium businesses can actually afford it, and engineered for the European regulatory reality (NIS2, DORA, the upcoming Cyber Resilience Act).
SentriKat's mission is simple: make vulnerability management accessible to European SMBs, without enterprise pricing, without enterprise complexity, and without having to send your sensitive inventory data across the Atlantic.
Why Exploited First?
SentriKat matches every published vulnerability against the software you run, and puts first the ones with confirmed active exploitation, cross-checked across several catalogues. They are under one percent of the list, and they are the ones attackers are actually using.
Our Principles
Your Data, Your Control
SentriKat runs inside your own network or in our EU cloud. Inside your network, your vulnerability data never leaves your infrastructure. The license heartbeat SentriKat sends carries counters, versions and timestamps, never what your scans found (every field is listed). In the cloud, your data is stored on our servers in the EU.
Auditable Source Code
Security tools should be transparent. Our source code is available for security audits and compliance reviews. You can verify exactly what runs in your environment.
Simplicity First
Enterprise software doesn't have to be complicated. SentriKat deploys in minutes with Docker Compose and gets out of your way so you can focus on remediation.
European by Design
Engineered in Europe, reading the EU's own vulnerability database natively. SentriKat combines several vulnerability catalogues with multi-source CVSS enrichment, no single point of failure, no dependency on a single continent's infrastructure.
Contact Us
Have questions or want to learn more? We'd love to hear from you.