Everything attaches to a case
Alerts, observables, email threads, chat, calls and AI analysis all hang off the case they belong to, so nothing gets filed somewhere else and forgotten.
Ten areas. One workspace.
Everything inside Sentendra, from the command center to administration. Your whole team works in the same place, on the same record.
- TenancyUnlimited customers per tenant
- AccessRBAC with custom permissions
- Sign-inSAML 2.0 / OIDC, TOTP 2FA
Sentendra · Workspace directory10 areas
Command center 4
- Dashboard
- My notifications
- CVE feed
- Threat map
Investigations 7
- Cases
- Alerts
- Observables
- Search
- Investigation mode
- Social Hub
- Archive
Detection & triage 6
- Triage rules
- Exclusion rules
- Auto-merge rules
- SLA policies
- Field management
- Case templates
Email & contacts 6
- Case emails
- Email threads
- Email templates
- Email accounts (IMAP/SMTP)
- Email exclusions
- Contacts
AI & analysis 8
- AI analysis
- AI analysis jobs
- AI chat, per case and global
- RAG configuration
- RAG knowledge base
- RAG analytics
- AI performance
- Sandbox analysis
Automation 4
- Playbooks (n8n)
- Triage rules
- Webhooks
- Scheduled jobs
Collaboration 5
- Team chat (DM, group, case)
- Audio and video calls
- Call recording and notes
- Activity timeline
- Mentions and reactions
Analytics & reports 5
- Case and alert analytics
- MTTR / MTTD analytics
- Customer-branded reports (PDF)
- Top-hosts report
- Scheduled reports
Administration 6
- Customers (sub-tenants)
- Users and roles (RBAC)
- Custom permissions
- Fleet agents
- API keys
- Release notes
Security & governance 6
- SAML 2.0 / OIDC SSO
- TOTP 2FA and backup codes
- Audit log
- Uptime monitoring
- License management
- System settings
How it fits together
The case is the spine.
Rules do the sorting
Triage, exclusion and auto-merge rules decide what reaches a person, how severe it is, and who owns it, with priority-ordered evaluation.
Administration stays separate
Customers, users, roles and API keys live in administration, and every privileged change is written to the append-only audit log.
Bring one real alert. We'll walk it to a closed case.
See Sentendra running on your own alerts in a 30-minute demo.