A hostile security auditor that never leaves your machine.
Sentinel is a local-first security suite that probes your work the way a real attacker would — static scanning for Flutter & Dart, live URL & security-header auditing, and an on-device AI you can interrogate. The model runs entirely on your own computer. No cloud inference. No telemetry. Nothing you scan ever leaves your machine.
Why Sentinel
One local-first suite — code, endpoints, and an AI to interrogate them — for developers who can't send their work to a third-party cloud, and don't want to.
A hostile auditor
Across your code and your live endpoints, Sentinel works like an attacker, not a cheerleader — everything is guilty until proven safe. No false comfort: if it's actually clean, it says so.
It doesn't just report — it roasts
Sentinel audits out loud. It speaks every finding like a comedian who's seen too many security disasters — brutal, funny, and not here to spare your feelings. Haptic feedback buzzes your Mac trackpad the instant it hits a vulnerability, and alerts fire on every code issue it finds. You don't read the report in silence — you feel it.
URL & header auditing
Point Sentinel at any live URL and it grades the target, flagging missing security headers — COOP, COEP, CORP, CSP and more — each with a copy-ready config fix you can paste straight into your server.
Flutter & Dart static scan
Deep static analysis purpose-built for Dart: command & SQL injection, path traversal, hardcoded secrets, broken auth, XSS, unsafe deserialization — each with risk level, file, and line. No lint-noise padding.
An on-device AI you can interrogate
An 8B model runs locally, so you can chat through findings, ask "how do I fix this," and get remediation code — without a single token leaving your machine.
Private by design
Every tool runs locally. Your code, your URLs, and your results are never uploaded, logged, or sent to any server — yours or ours. Audit proprietary or client work with zero exposure.
No cloud, no check-ins
After activation the engine runs on your hardware — no license-server pings, no telemetry. Static scans and the AI work with zero internet; only a URL audit reaches out, and only to the target you choose.
See Sentinel in action
Watch a live audit — security grade, real findings, and copy-ready fixes.
Real security auditing — for everyone.
I'd seen what auditing firms charge to test an app — thousands, sometimes tens of thousands of dollars — putting genuine vulnerability testing out of reach for indie developers and small teams. Security shouldn't be a luxury reserved for companies with big budgets. So I built Sentinel: the same caliber of analysis, running privately on your own machine, for one fair price.
And it doesn't go easy on you. Sentinel is a deliberately hostile auditor — it probes your code the way an attacker would, so the only surprises are the ones you fix before someone else finds them. No retainers, no per-scan invoices, and your source code never leaves your computer.
— Bryon, Founder · CamLabs
How it works
A one-time license, bound to your machine.
What you'll need
- Windows or macOS (Apple Silicon recommended on Mac — uses Metal acceleration).
- A real GPU for full speed. CPU-only works but is slower.
- ~5 GB disk for the on-device AI model (downloaded once on first launch).
Frequently asked questions
The short answers. Still curious? Reach out via support.
Does my source code ever leave my computer?
Does Sentinel work offline?
What does Sentinel actually audit?
What do I need to run it?
Is this a subscription?
How does activation work?
One license. One machine. Pay once.
No subscription, no recurring fees — a lifetime license.