Sentrix · security automation

Sentrix builds the workflow.
The briefing goes out.

Sentrix is the security automation canvas in CyberHQ. The recurring outcome it delivers is a Patch Tuesday report from Microsoft MSRC and a daily CISA KEV digest. Investigate an IP, domain, URL, or file hash when a finding needs a closer look.

Sentrix
Workflow canvas
Monthly
Patch Tuesday report
Daily
CISA KEV digest
SENTRIX DELIVERS FROM PUBLIC ADVISORIES · INVESTIGATE USES YOUR API KEYS
Microsoft MSRC
CISA KEV
NVD
VirusTotal (your key)
AbuseIPDB (your key)
SENTRIX · SECURITY AUTOMATION CANVAS

Describe the workflow. Sentrix builds it.

Sentrix is the signature surface in CyberHQ. You review the automation on a live canvas — trigger, pull, report, notify. The clearest recurring outcome that canvas delivers is Patch Tuesday and the daily CISA KEV digest.

  • ✓Workflow canvas with templates and a reusable node palette
  • ✓Patch Tuesday report from the Microsoft MSRC update guide
  • ✓Daily CISA KEV digest by email or webhook
  • ✓Investigate on the same canvas when VirusTotal or AbuseIPDB keys are set
Open Sentrix →
SENTRIX · PATCH TUESDAY
LIVE
01Trigger · second Wednesday, 05:00 ISTTRIGGER
02Pull · Microsoft MSRC update guideMSRC
03Band · critical and exploited CVEsREPORT
04Deliver · one inbox via ResendSEND
WHAT SENTRIX DELIVERS

Patch Tuesday, daily KEV, then investigate

These paths call real sources. Endpoint, network, DLP, SIEM, and admin screens stay in the app and are marked Preview.

⚙️

Sentrix canvas

Open the automation surface. Review the Patch Tuesday workflow, export the workbook, and run the steps you can see on the canvas.

🗓️

Patch Tuesday report

On the second Wednesday, Sentrix pulls Microsoft’s MSRC update guide, bands critical and exploited CVEs, and emails a workbook plus HTML summary to the inbox you configure.

🛑

Daily CISA KEV digest

Each day, newly listed Known Exploited Vulnerabilities are collected from CISA, with related zero-day headlines. Sentrix emails the digest, or posts it to a Slack, Teams, or Discord webhook if you set one.

🔍

Investigate

Look up an IP, domain, URL, or file hash from Sentrix or the investigate page. Reputation comes from VirusTotal and AbuseIPDB only when those keys are set. Missing keys return “not configured.”

PREVIEW

Screens that are not the product

Endpoint, network, DLP, SIEM, red team, and admin views are in-app previews. They are labeled in the dashboard and do not feed the briefings.

🖥️

Endpoint · Preview

Sample host views. Not an EDR agent and not connected to your estate.

🌐

Network · Preview

Sample discovery screens. Not a live network sensor.

🔐

DLP · Preview

Sample policy incidents. Not inspecting your data flows.

📊

SIEM · Preview

Sample log panels. Not an ingestion pipeline.

📧

Mailbox · connect to use

Scanning runs only after a mailbox is connected. Sample phishing messages are not shown.

HOW IT WORKS

Open Sentrix, then let it deliver

No agent install. Sentrix calls public feeds and emails the result.

01

Open Sentrix

Request a login, then open the canvas. There is no self-serve checkout.

02

Set the inbox

REPORT_EMAIL and RESEND_API_KEY are what the Patch Tuesday and KEV messages need.

03

Let Sentrix run

Patch Tuesday mail goes out on the second Wednesday at 05:00 IST. The Zero-Day cron is paused.

04

Investigate when needed

Add VirusTotal and AbuseIPDB keys, then look up an indicator from Sentrix. Without those keys the lookup says so.

ACCESS

Request a login

CyberHQ does not sell a self-serve plan and does not meter endpoints. Ask for access or book a walkthrough of Sentrix delivering Patch Tuesday and the daily KEV digest.

SENTRIX ACCESS
By request

What a login includes today.

  • ✓Sentrix workflow canvas
  • ✓Patch Tuesday email and workbook
  • ✓Daily CISA KEV digest
  • ✓Investigate, when API keys are set
  • ✓Preview screens, clearly labeled
Request Access
QUESTIONS

Frequently asked

What is Sentrix?

Sentrix is the security automation canvas inside CyberHQ. You review workflows on a live canvas. The recurring outcome it delivers today is the Patch Tuesday report and the daily CISA KEV digest, with investigate for indicator lookup when API keys are set. Connectors that are not wired yet stay labeled as templates.

Which sources does a briefing use?

Patch Tuesday reads the Microsoft MSRC update guide. The daily digest reads the CISA Known Exploited Vulnerabilities catalog and zero-day headlines. Investigate calls VirusTotal and AbuseIPDB only when you set those API keys. If a key is missing, the lookup says it is not configured and does not return a score.

Do I need to install an agent?

No. Sentrix is hosted and does not require an endpoint agent. Endpoint, network, and DLP pages in the dashboard are previews.

How is my data handled?

API keys are held as environment configuration and are not rendered back to the browser. Sessions are signed server-side. The briefing mailbox address is the one you configure as REPORT_EMAIL.

Can I drop this into a SIEM?

The Patch Tuesday report exports CSV and a formatted workbook. There is no live Splunk, Sentinel, or other SIEM connector.

What does the Patch Tuesday report include?

A banded report from Microsoft MSRC advisories, highlighting critical and exploited vulnerabilities, with CSV and workbook export and a scheduled email on the second Wednesday (05:00 IST).

See Sentrix deliver the next briefing.

Request access or schedule a walkthrough of the canvas, the Patch Tuesday report, and the daily KEV digest.