Auto Secure LoginKnow every device on your network the moment it appears.
Network Sentinel continuously discovers and fingerprints everything on a network, tracks each device's trust state, and raises real-time alerts when something new joins, a watched device returns, or an important one goes offline. On top of visibility it can run tightly-scoped, non-disruptive adversary scenarios — each gated by a signed authorization.
Capabilities
Visibility first — then, only with consent, validation.
Passive + active discovery
IPv4 neighbor table, active arp-scan, mDNS, SSDP, and router adapters (dnsmasq, UniFi) — each module independently tested.
Device intelligence
Trust states (trusted / important / watch / guest / blocked), device-type classification, identity confidence, and an auto-updating manufacturer OUI registry.
Presence tracking
Per-network device sessions, so appearances and disappearances are historical — not just a current snapshot.
Real-time alerts
New device, watched device returned, important device offline, or an agent gone dark — delivered by webhook and native Android push with retry and history.
Role-based access
Owner / Administrator / Operator / Read-only per deployment, plus an audit log, notification history, and per-client rate limiting.
Cross-platform clients
Go field agent for Raspberry Pi, a Windows discovery collector, and one React interface delivered as PWA + Android — the collection surface stays off the server.
Multi-channel delivery
Alerts fan out to webhooks and native Android FCM push with exponential backoff and a full delivery history — you find out even if one channel is down.
Installable console
A static PWA console served by the API — one interface across desktop and phone, with no separate app to keep in sync.
Signed validation scenarios
Optional authorized scenarios — passive map, rogue-printer, look-alike SSID (which cannot deauth), credential-entry (which discards every value) — each gated by a signed scope.
requiresSignedScope. The SSID scenario cannot deauthenticate, the credential scenario discards every typed value, and the portal literally cannot be constructed without a valid scope manifest.Under the hood
Built to be trusted with your LAN.
- A NestJS/Fastify API + separate background worker on systemd — no Docker.
- Device-supplied names are rendered with
createElement/textContent, neverinnerHTML. - Deploys are manual-trigger only, health-checked, and roll back automatically via an exit trap on any failure after the symlink swap.
- Release provenance is verified, not asserted — the exact commit is rebuilt and diffed against the running tree.
- A multi-tenant Postgres path is fully built and CI-tested, gated off rather than half-shipped.
| Live at | sentinel.autosecurelogin.com |
| Appliance | Raspberry Pi 5 + Go field agent (arm64/amd64) |
| Clients | PWA · native Android · Windows tray collector |
| Alerts | Webhook + Android FCM push |
| For | Homes, small offices, and the MSPs who serve them |
See what's really on your network.
Continuous discovery, trust states, and phone alerts — with a consent-bound path to authorized validation when you need it.