Sentrias
Request a Briefing

Know which security controls are working

Sentrias evaluates security posture using assessments, external scans, and evidence from connected tools. Sentrias CyberScore brings the results together, with findings that show where protection falls short and give insurance and IT teams a basis for follow-up.

Request a Platform Briefing Compare Plans

Understand what supports Sentrias CyberScore

Sentrias CyberScore summarizes security posture on a scale of 0 to 100. The supporting findings explain the gaps identified and what needs attention.

Assessment responses record information the organization supplies about its security practices and controls.

External findings capture observations from scans of the organization’s domains and public IP addresses.

Connected control evidence reflects information from supported security and IT tools about protection, access, assets, and other control conditions.

The score reflects the evidence available under the selected plan. Its sources, assessed scope, and collection dates provide the context needed to interpret it.

Read evidence from the tools already in place

Security and IT tools already report information to their vendors’ cloud management platforms. Sentrias retrieves the information needed for control checks through secure, read-only API connections.

For this collection, Sentrias queries the vendor platforms rather than directly polling the organization’s laptops or servers. Scheduled requests gather the relevant data for processing into findings, supporting evidence, and Sentrias CyberScore.

Configured actions use separately authorized permissions and follow the agreed operating model, including any required human approval.

Assessment responsesWHAT THE ORGANIZATION SUPPLIESExternal findingsSCANS OF DOMAINS AND PUBLIC IP ADDRESSESConnected control evidenceEVIDENCE FROM SUPPORTED SECURITY AND IT TOOLSLAPTOPDESKTOPSERVERTools report to their vendor platformVendor cloud platformsTHE CONSOLES THE TOOLS REPORT TOAVAILABLE WITHEndpoint protectionIs protection active and healthy?PRO AND INTRINSICEvidenceWhat follow-up is recorded?PRO AND INTRINSICRMMWhich managed devices and patchstates are recorded?INTRINSICIdentityWho has access and how is itprotected?INTRINSICSIEMWhat detection and loggingactivity is reported?INTRINSICRead-only requestControl evidenceSentrias control checksCOMPARED WITH THE CONTROL REQUIREMENTFindings and supporting evidenceSentrias CyberScore
Assessment responsesWHAT THE ORGANIZATION SUPPLIESExternal findingsSCANS OF DOMAINS AND PUBLIC IP ADDRESSESConnected control evidenceEVIDENCE FROM SUPPORTED SECURITY AND IT TOOLSLAPTOPDESKTOPSERVERTools report to their vendor platformVendor cloud platformsTHE CONSOLES THE TOOLS REPORT TOAVAILABLE WITHEndpoint protectionIs protection active and healthy?PRO AND INTRINSICEvidenceWhat follow-up is recorded?PRO AND INTRINSICRMMWhich managed devices and patchstates are recorded?INTRINSICIdentityWho has access and how is itprotected?INTRINSICSIEMWhat detection and loggingactivity is reported?INTRINSICRead-only requestControl evidenceSentrias control checksCOMPARED WITH THE CONTROL REQUIREMENTFindings and supporting evidenceSentrias CyberScore

Check more than whether protection is installed

Endpoint detection and response, or EDR, provides evidence about protection on the devices an organization uses. Sentrias checks that evidence to understand both protection status and activity reported by the endpoint tool.

Protection statusAgent reportingProtection and policy statusDevice identityThreat findingsDetection timeAffected deviceReported severity and statusActions reported by the endpoint toolBlocking or quarantine resultIsolation statusResolution and recurrence history
Protection statusAgent reportingProtection and policy statusDevice identityThreat findingsDetection timeAffected deviceReported severity and statusActions reported by the endpoint toolBlocking or quarantine resultIsolation statusResolution and recurrence history

Protection coverage

Is the agent installed, reporting, and healthy on the known devices in scope?

Threat activity

What threats has the tool detected, on which devices, and with what reported status?

Recorded protective actions

Does the tool report blocking, quarantine, containment, or device isolation?

Recurrence

Has the same threat appeared again after a recorded resolution?

Control health

Are protection policies, agents, and definitions operating as expected?

Other sources help explain those findings. Asset inventory establishes which devices should have protection. Identity data adds access information. Evidence records document ownership and follow-up.

Follow a finding through to the next check

Consider an endpoint agent that stops reporting. Sentrias checks the source, records the finding, and tracks the evidence available as the responsible team investigates.

SENTRIASRESPONSIBLE TEAMFINDING RECORD01Agent stops reportingConnected endpoint toolReporting gapSource, device, andobservation time02Finding raised for reviewSentriasUnder reviewObserved condition andnotification record03Follow-up recordedInternal IT team, MSP, or MSSPFollow-up recordedOwner, recorded action,or exception04Protection status checked againSubsequent source checkReporting restoredLatest reporting andprotection statusFinding updated
FINDING RECORDSENTRIAS01Agent stops reportingConnected endpoint toolReporting gapSource, device, and observation time02Finding raised for reviewSentriasUnder reviewObserved condition and notification recordRESPONSIBLE TEAM03Follow-up recordedInternal IT team, MSP, or MSSPFollow-up recordedOwner, recorded action, or exceptionSENTRIAS04Protection status checked againSubsequent source checkReporting restoredLatest reporting and protection statusFinding updated

Check the reported condition

At the next applicable check, Sentrias retrieves the agent’s status from the connected vendor platform and compares it with the control requirement.

Record the finding

The loss of reporting raises a finding for review and informs Sentrias CyberScore. The finding identifies the affected device and the condition requiring attention.

Notify the responsible team

The configured workflow directs the finding to the appropriate contact. Connected evidence records add the investigation, actions, or exceptions documented by the team.

Check the status again

A subsequent check shows whether the agent is reporting and what protection status the source now records. That evidence can be reviewed alongside the team’s recorded resolution.

Sentrias documents the finding and follow-up. The organization’s internal IT team, MSP, or MSSP investigates and performs the corrective work.

What the 17 controls check

Sentrias checks conditions across identity, threat detection, endpoint protection, vulnerabilities, logging, and assets. Its control framework maps to NIST CSF 2.0.

Connected tools supply evidence for the checks they support. Some controls also require records or confirmation from the organization.

See the platform in practice

Bring your underwriting questions and an overview of the organization’s security tools. We’ll walk through the relevant connections, the findings they support, and how that evidence can fit your review process.

Request a Platform Briefing