Dusk Engineering

Dusk Sentinel

Real-time attack detection, alerting and blocking for Linux, macOS and Windows servers. One executable, no dependencies, your own firewall.

version 0.2.0 2026-09-16

Download

Self-contained executables. Nothing else to install.

PlatformFileSizeSignature
macOS installer
Apple silicon and Intel
dusk-sentinel-0.2.0-macos.pkg
8bb765159bf22832b0fa744059346e265273ce151771b8c4ed095b61f4fce320
79.3 MBunsignedDownload
Linux x86-64
dusk-sentinel-0.2.0-linux-x64.tar.gz
09809ba1566e7aae576c68380314cdfc09e52446364f6f7297e59c1e19557906
39.9 MBchecksumDownload
Linux ARM64
dusk-sentinel-0.2.0-linux-arm64.tar.gz
6a7834262612c130e62f8c4739946a4497dbb0c6220345e03131f15698d18db6
39.9 MBchecksumDownload
macOS Intel (tar.gz, for scripted installs)
dusk-sentinel-0.2.0-darwin-x64.tar.gz
bd1cb3abdc02c941fd6829ba30ec3c40ea7edbed736b658bcf345b90f8d89c8b
40.7 MBunsignedDownload
macOS Apple silicon (tar.gz, for scripted installs)
dusk-sentinel-0.2.0-darwin-arm64.tar.gz
9dc72a140b16d898537cdc7904c85edaf76e2e439de079d027f998574c5d0a0b
38.7 MBunsignedDownload
Windows x64
dusk-sentinel-0.2.0-win-x64.zip
a5197b50b7a3eb1e5dc64670a7832dacbb0f95dfb2a1473df8363be040d54cd8
33.9 MBunsignedDownload
Windows ARM64
dusk-sentinel-0.2.0-win-arm64.zip
ce9d8d781ec8d481a5e588fccec203129153d892b85d7b233f74eececd57b916
30.2 MBunsignedDownload

Install

macOS

Download the installer, double-click it, follow the steps. Sentinel starts as a background service and your browser opens the dashboard, where you create your administrator account.

This installer is not yet notarised: if macOS says it cannot be opened, right-click the .pkg and choose Open. Remove later with sudo /usr/local/dusk-sentinel/uninstall.sh.

Windows

Unzip, double-click dusk-sentinel.exe, approve the administrator prompt. It installs itself to Program Files, registers a service that starts at boot, and opens the dashboard for first-run setup.

This build is not yet code-signed, so SmartScreen will warn; choose More info, then Run anyway, after checking the checksum. Remove later with install\windows\uninstall.ps1.

Linux

tar -xzf dusk-sentinel-0.2.0-linux-x64.tar.gz
cd dusk-sentinel-0.2.0-linux-x64
sudo install/linux/install.sh

systemd service; the dashboard then asks you to create the administrator account. Blocking needs ipset and iptables.

The dashboard lives at http://127.0.0.1:3250. Put it behind HTTPS on your VPN for phone push notifications.

Verify a download

curl -O https://dusksentinel.com/0.2.0/SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing     # macOS: shasum -a 256 -c SHA256SUMS
All checksums
8bb765159bf22832b0fa744059346e265273ce151771b8c4ed095b61f4fce320  dusk-sentinel-0.2.0-macos.pkg
d25d8f7951874eb5b07d1b5876d1399cdf21dd4ab77d1905670575230390c2df  dusk-sentinel-0.2.0.tar.gz
633361c1d6e75ca22694c626752fbf5f997e1dc33e38c9d26bb8329261ff9a7b  dusk-sentinel-0.2.0.zip
09809ba1566e7aae576c68380314cdfc09e52446364f6f7297e59c1e19557906  dusk-sentinel-0.2.0-linux-x64.tar.gz
6a7834262612c130e62f8c4739946a4497dbb0c6220345e03131f15698d18db6  dusk-sentinel-0.2.0-linux-arm64.tar.gz
bd1cb3abdc02c941fd6829ba30ec3c40ea7edbed736b658bcf345b90f8d89c8b  dusk-sentinel-0.2.0-darwin-x64.tar.gz
9dc72a140b16d898537cdc7904c85edaf76e2e439de079d027f998574c5d0a0b  dusk-sentinel-0.2.0-darwin-arm64.tar.gz
a5197b50b7a3eb1e5dc64670a7832dacbb0f95dfb2a1473df8363be040d54cd8  dusk-sentinel-0.2.0-win-x64.zip
ce9d8d781ec8d481a5e588fccec203129153d892b85d7b233f74eececd57b916  dusk-sentinel-0.2.0-win-arm64.zip

What it does

Sees every attempt

  • SSH, sudo, Windows logons, Remote Desktop
  • Web probes and exploit payloads (Log4Shell, SQL injection, traversal, command injection) in Apache, nginx and IIS logs
  • Decoy ports, your own apps through custom rules

Tells you as it happens

  • Live dashboard with per-attacker drill-down
  • Phone push, Slack, Discord, any webhook, email
  • Campaign grouping: one alert per attacker, not hundreds

Blocks them

  • Automatic firewall blocks with escalating durations
  • ipset on Linux, pf on macOS, Windows Firewall on Windows
  • Never blocks your own addresses or a successful login

Source release

The same program as plain JavaScript, for running under your own Node.js (22.13 or newer). Zero dependencies.

Source, tar.gzdusk-sentinel-0.2.0.tar.gz94 KBDownload
Source, zipdusk-sentinel-0.2.0.zip103 KBDownload

Licence

Dusk Sentinel is proprietary software from Dusk Engineering. The licence terms are being finalised; until they are published, downloads are for evaluation on systems you own or administer. For commercial use, support, or anything else: peter@duskengineering.services.

Changelog