Dusk Engineering

Dusk Sentinel

Real-time attack detection, alerting and blocking for Linux, macOS and Windows servers. One executable, no dependencies, your own firewall.

version 0.1.0 2026-09-15

Download

Self-contained executables. Nothing else to install.

PlatformFileSizeSignature
Linux x86-64
dusk-sentinel-0.1.0-linux-x64.tar.gz
a15eb9267cc9e87b700e6b65e4b588599eac6b9dd15df2297962c0aebf3024a7
39.8 MBchecksumDownload
Linux ARM64
dusk-sentinel-0.1.0-linux-arm64.tar.gz
391edf3eed52ab7d2d5efd2e500f5feccef9ae3842669f8ffa122817e8f78acc
39.8 MBchecksumDownload
macOS Intel
dusk-sentinel-0.1.0-darwin-x64.tar.gz
8be20fb80332ab44dd37962d338214efba5248a6d77470192016e9e72618e3c4
40.6 MBunsignedDownload
macOS Apple silicon
dusk-sentinel-0.1.0-darwin-arm64.tar.gz
8212e566aea060610673ba6a3b289a18435d0cb3c588667b4c3891c16f198beb
38.6 MBunsignedDownload
Windows x64
dusk-sentinel-0.1.0-win-x64.zip
42319f5da42dac2d3c7f2560aa96dd08bca0a33baade5206fe86e2fb8fd6535d
33.9 MBunsignedDownload
Windows ARM64
dusk-sentinel-0.1.0-win-arm64.zip
32fbf26118ee1f6a90dbababfa90d29a2971d06054acf6400363c6d6999ba26a
30.2 MBunsignedDownload

Install

Linux

tar -xzf dusk-sentinel-0.1.0-linux-x64.tar.gz
cd dusk-sentinel-0.1.0-linux-x64
sudo install/linux/install.sh

systemd service. Config in /etc/dusk-sentinel/sentinel.json, dashboard password in /etc/dusk-sentinel/env. Blocking needs ipset and iptables.

macOS

tar -xzf dusk-sentinel-0.1.0-darwin-arm64.tar.gz
cd dusk-sentinel-0.1.0-darwin-arm64
sudo install/macos/install.sh

launchd daemon. The installer prints the dashboard password. This build is not yet notarised: if macOS refuses to run it, clear the quarantine flag first with xattr -d com.apple.quarantine dusk-sentinel.

Windows

Expand-Archive dusk-sentinel-0.1.0-win-x64.zip
cd dusk-sentinel-0.1.0-win-x64
powershell -ExecutionPolicy Bypass -File install\windows\install.ps1

Run from an elevated PowerShell. Scheduled task at boot as SYSTEM. This build is not yet code-signed, so SmartScreen will warn; choose More info, Run anyway, after checking the checksum.

Then open http://127.0.0.1:3250. Put it behind HTTPS on your VPN for phone push notifications.

Verify a download

curl -O https://get.duskengineering.services/sentinel/0.1.0/SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing     # macOS: shasum -a 256 -c SHA256SUMS
All checksums
e506779bb4f04cf2d6abee4388a7a6acfe51277ee5b8187e7f662246099efae9  dusk-sentinel-0.1.0.tar.gz
f5f0a11411209cc2a3c86ff3fb31d2e9c0dcc0ed34a8589724813592f61d6856  dusk-sentinel-0.1.0.zip
a15eb9267cc9e87b700e6b65e4b588599eac6b9dd15df2297962c0aebf3024a7  dusk-sentinel-0.1.0-linux-x64.tar.gz
391edf3eed52ab7d2d5efd2e500f5feccef9ae3842669f8ffa122817e8f78acc  dusk-sentinel-0.1.0-linux-arm64.tar.gz
8be20fb80332ab44dd37962d338214efba5248a6d77470192016e9e72618e3c4  dusk-sentinel-0.1.0-darwin-x64.tar.gz
8212e566aea060610673ba6a3b289a18435d0cb3c588667b4c3891c16f198beb  dusk-sentinel-0.1.0-darwin-arm64.tar.gz
42319f5da42dac2d3c7f2560aa96dd08bca0a33baade5206fe86e2fb8fd6535d  dusk-sentinel-0.1.0-win-x64.zip
32fbf26118ee1f6a90dbababfa90d29a2971d06054acf6400363c6d6999ba26a  dusk-sentinel-0.1.0-win-arm64.zip

What it does

Sees every attempt

  • SSH, sudo, Windows logons, Remote Desktop
  • Web probes and exploit payloads (Log4Shell, SQL injection, traversal, command injection) in Apache, nginx and IIS logs
  • Decoy ports, your own apps through custom rules

Tells you as it happens

  • Live dashboard with per-attacker drill-down
  • Phone push, Slack, Discord, any webhook, email
  • Campaign grouping: one alert per attacker, not hundreds

Blocks them

  • Automatic firewall blocks with escalating durations
  • ipset on Linux, pf on macOS, Windows Firewall on Windows
  • Never blocks your own addresses or a successful login

Source release

The same program as plain JavaScript, for running under your own Node.js (22.13 or newer). Zero dependencies.

Source, tar.gzdusk-sentinel-0.1.0.tar.gz44 KBDownload
Source, zipdusk-sentinel-0.1.0.zip50 KBDownload

Licence

Dusk Sentinel is proprietary software from Dusk Engineering. The licence terms are being finalised; until they are published, downloads are for evaluation on systems you own or administer. For commercial use, support, or anything else: peter@duskengineering.services.

Changelog