Where is Sentinel hosted?
Production at sentinel.teckpath.com on AWS (ECS Fargate, Multi-AZ RDS). Same operational discipline as TeckPath managed services.
Security first by design.
Sentinel is built and operated by TeckPath, SOC 2 Type II, 24/7 SOC, 14 years securing Canadian and North American clients.
Read only by default
Least privilege cross account IAM role with external ID. Remediation requires explicit opt in and scoped write role.
RBAC & MFA
Admin, operator, viewer roles. OIDC SSO, TOTP MFA, SCIM user provisioning.
Full audit log
Every action recorded, exportable as NDJSON. Who assessed, approved, and applied, nothing unseen.
Hardened deployment
AWS ECS Fargate, Multi-AZ RDS, WAF, rate limits, security headers, encrypted at rest.
Your data, your AWS
Sentinel complements AWS Security Hub, we never ask you to turn off native detection. Assessment data stays in your tenant; share links are optional and time limited.
Can auditors get access?
Password protected share links with optional expiry, no auditor login to your Sentinel tenant required.