What Sentinel does.
Every capability is designed to work autonomously — detecting, responding, and protecting without human intervention.
🔍
Behavioral Fingerprinting
Request signature analysis, TLS fingerprinting, IP/ASN reputation, posting velocity, timing patterns, and coordinated inauthentic behavior detection identify bot traffic in real time.
⚡
Proof-of-Work Challenges
Suspicious requests trigger automatic PoW challenges. Each request costs the attacker CPU time. At scale, this makes bot farm attacks economically unviable.
🖥️
Auto-Scale Infrastructure
When attack intensity exceeds thresholds, Sentinel automatically provisions Hetzner Cloud overflow capacity. No human operator required. The system scales to absorb the attack.
🧮
Attack Monetization
Every blocked request has a cost to the attacker. Sentinel turns the economics of abuse against the abuser — attacking Candor becomes an expensive mistake.
🕸️
CIB Detection
Coordinated Inauthentic Behavior detection identifies troll farms using real browsers. Not just automated traffic — human-operated manipulation campaigns.
📊
Real-Time Dashboard
Live metrics at /monitor — total requests, blocked count, challenged count, clean rate, IP tracking, Prometheus process metrics, and request rate charts.