sentrik
Governance runtime for AI-generated code. Scan, gate, and trace compliance automatically.
npm install -g sentrik
30-Second Quickstart
# Open any project and scan — no setup needed
sentrik scan
# Enforce quality gate (exit 1 on failure)
sentrik gate
That's it. sentrik auto-detects your project, applies sensible defaults, and shows findings inline. No wizard, no config files needed.
Want to customize? Run sentrik init to generate a .sentrik/config.yaml with detected settings.
Why sentrik?
Teams using Copilot, Cursor, Claude Code, and AI coding agents generate code fast — but compliance doesn't keep up. sentrik enforces standards automatically:
- IEC 62304 for medical device software (FDA/EU MDR)
- OWASP Top 10 for web application security
- SOC2 Trust Services Criteria
- Custom rule packs for your own standards
Key Features
| Feature | Description |
|---|---|
| Zero Config | Auto-detects project, applies sensible defaults — just scan |
| Rules Engine | Regex, AST, and file-policy rules with auto-fix |
| Standards Packs | 26 pre-built packs (632 rules): IEC 62304, OWASP, SOC2, HIPAA, PCI DSS, ISO 27001, GDPR, EU AI Act, MISRA C, DO-178C, ISO 26262, and more |
| CI/CD Gate | Block non-compliant PRs in GitHub Actions, Azure Pipelines, or GitLab CI |
| PR Decoration | Compliance summary + findings as PR comments on GitHub and Azure DevOps |
| Work Item Traceability | Link findings to Azure DevOps, GitHub Issues, or Jira |
| Reconciliation | Auto-create/update/close work items from scan results |
| Management Dashboard | Web UI for findings, rules, packs, audit log |
| REST API | 120+ endpoints for remote scanning and integration |
| Reports | HTML, JUnit XML, SARIF, CSV, compliance reports, trust center |
| Continuous Monitoring | sentrik watch — file-change detection and periodic scanning |
| Confidence Scoring | Variable confidence based on code context; opt-in LLM re-scoring (provider-agnostic: Anthropic, OpenAI, Ollama) |
| VS Code / Cursor | Auto-scan on save, inline findings, zero setup |
| Claude Code | sentrik claude-init — onboarding interview, 26 MCP tools, scan-on-edit feedback into the conversation |
Installation
npm install -g sentrik
Downloads a platform-specific binary. No Python, no Docker, no extra dependencies. Works on macOS, Linux, and Windows.
CI/CD Integration
GitHub Actions
- name: sentrik Gate
run: |
npm install -g sentrik
sentrik gate --git-range "origin/main...HEAD" --decorate-pr --status-check
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Azure Pipelines
- script: |
npm install -g sentrik
sentrik gate --git-range "origin/main...HEAD" --decorate-pr --status-check
env:
AZURE_DEVOPS_PAT: $(AZURE_DEVOPS_PAT)
GitLab CI
sentrik-gate:
stage: compliance
image: python:3.12-slim
before_script:
- pip install sentrik
script:
- sentrik gate --git-range "origin/$CI_MERGE_REQUEST_TARGET_BRANCH_NAME...HEAD"
artifacts:
reports:
junit: out/findings.junit.xml
Management Dashboard
Start the API server and open the dashboard:
sentrik dashboard
The dashboard provides:
- Scan metrics and severity charts
- Searchable/filterable rule browser
- Standards pack management
- Work items with DevOps sync
- Governance policy configuration
- Audit log timeline
Enterprise Features
Unlock advanced capabilities with a license key from sentrik.dev:
sentrik license # Check your current license status
| Feature | Community (Free) | Team | Organization | Enterprise |
|---|---|---|---|---|
| Scan & gate | Yes | Yes | Yes | Yes |
| Dashboard + API | Yes | Yes | Yes | Yes |
| Standards packs | 6 (193 rules) | 20 (512 rules) | 26 (632 rules) | 26 (632 rules) |
| Custom standards packs | 5 | 25 | 100 | Unlimited |
| Work item reconciliation | - | Yes | Yes | Yes |
| Priority support | - | Yes | Yes | Yes |
| Parallel scanning | - | - | Yes | Yes |
| Severity rescoring | - | - | Yes | Yes |
| OAuth integration | - | - | Yes | Yes |
| Governance profiles | - | - | Yes | Yes |
| Audit logging | - | - | Yes | Yes |
| Async approval gates | - | - | - | Yes |
Paid tiers are available by contacting hello@sentrik.dev.
Configuration
sentrik auto-detects your project and works without config. To customize, create .sentrik/config.yaml:
output_dir: out
standards_packs:
- owasp-top-10
gate_fail_on:
- critical
- high
reporters:
- html
- sarif
devops_provider: github # stub, azure, github, jira
Legacy .guard.yaml files are still supported. Migrate with sentrik migrate.
Environment variables override config values — see documentation for the full list.
Standards Packs
sentrik list-packs # See available packs
sentrik add-pack fda-iec-62304 # Enable a pack
sentrik add-pack owasp-top-10 # Enable another
All 26 packs (632 rules total):
| Pack | Rules | Standard | Tier |
|---|---|---|---|
owasp-top-10 |
69 | OWASP Top 10 2021 | Free |
soc2 |
30 | SOC2 Trust Services Criteria | Free |
python-security |
18 | Python Security | Free |
go-security |
15 | Go Security | Free |
supply-chain-security |
26 | SLSA / NIST SSDF / CISA | Free |
cpp-coding-standards |
35 | Modern C/C++ Safety | Free |
fda-iec-62304 |
31 | IEC 62304 / 21 CFR Part 11 | Team |
hipaa |
25 | HIPAA Security Rule | Team |
pci-dss |
33 | PCI DSS v4.0 | Team |
iso-27001 |
32 | ISO 27001:2022 | Team |
gdpr |
25 | EU GDPR | Team |
nist-800-53 |
21 | NIST SP 800-53 Rev 5 | Team |
cmmc |
19 | CMMC 2.0 | Team |
nist-ai-rmf |
16 | NIST AI RMF (AI 600-1) | Team |
eu-ai-act |
23 | EU Artificial Intelligence Act | Team |
php-security |
15 | PHP/Laravel Security | Team |
kotlin-security |
12 | Kotlin/Android/Spring Boot | Team |
cloud-iac |
30 | Terraform / Cloud IaC Security | Team |
java-security |
19 | Java / Spring Security | Team |
csharp-security |
18 | C#/.NET / ASP.NET Security | Team |
iec-81001-5-1 |
20 | Health Software Cybersecurity | Org |
fda-21cfr11 |
16 | 21 CFR Part 11 Electronic Records | Org |
iso-14971 |
18 | Medical Device Risk Management | Org |
misra-c |
21 | MISRA C/C++ | Org |
do-178c |
22 | Airborne Systems Software | Org |
iso-26262 |
23 | Automotive Functional Safety | Org |
Links
License
Proprietary. See LICENSE for details. Free tier available with no limits on core features.
1 maintainer
Release files for sentrik 1.5.126
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| sentrik-1.5.126.tar.gz | 5.0 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| sentrik-1.5.126-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 5.9 MB
Release files / sentrik-1.5.126.tar.gz
| Download URL | sentrik-1.5.126.tar.gz |
|---|---|
| Size | 5.0 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
752740c0cdd7af7a2c349269a0d2f9a6220f1b25fd6a48cd188b6e5dde00e5f4
|
|
BLAKE2b-256 checksum How to use checksums |
fa470dd8a86e0248b15073b839df8829359ba918356bbbe16cf99663fd153f95
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.10
|
Release files / sentrik-1.5.126-py3-none-any.whl
| Download URL | sentrik-1.5.126-py3-none-any.whl |
|---|---|
| Size | 952.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d6fd451a5baf400668f4583f7cb114e9c512869d9e78c736235479c58798c254
|
|
BLAKE2b-256 checksum How to use checksums |
f92348029959b53252e657ec595c50a14da92356b40c0177362d26b667fabd8c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.10
|
