Platform performance.
Backed by production data.

Every number on this page is traceable to a specific execution run against live production agents. No aspirational metrics. Only what we measured.

15 MB
Agent RSS idle

Stays under 100 MB under load.

0.11s
Python warm startup

Average of 5 runs.

1.28 ms
Agent → control plane

Same region, live production.

0.1%
CPU usage idle

Negligible when idle.

Three agents,
two architectures

All running the same binary with embedded security, scheduling, and media detection.

Agent
Architecture
vCPUs
Binary
sentra
x86_64 (AMD EPYC)
2
14 MB
sentrazero
x86_64 (AMD EPYC)
2
14 MB
vcnsentra
ARM64 (Neoverse-N1)
1
13 MB
15 MB
Resident memory (idle)

Agent consumes 15 MB RSS at rest. Stays under 100 MB under load.

0.1%
CPU usage (idle)

Negligible CPU overhead when no plugins are executing.

11
Open file descriptors

Minimal OS footprint. Runs comfortably on any server or VM.

Agent runtime
benchmarks

Measured on live production agents (Oracle Cloud Mumbai).

Plugin execution
overhead

Startup and sandbox creation dominate the measured time, and both are measured in milliseconds. Once warm, Python starts in about a tenth of a second.

Python startup (warm cache)0.11s (avg of 5)
Python startup (cold cache)0.18s (first run)
Native binary startup (CGO)1–2 ms
Sandbox namespace creation5–10 ms (user/pid/mount/uts/ipc/net)

CPU-bound
workload

5M sum-of-squares in Python. The sandbox adds essentially no overhead to compute-bound work. Utilization hits ~100% of the available core.

Wall time2.97s
CPU utilization~100% (user: 2.94s + sys: 0.03s)
Sandbox overhead~0% for CPU-bound work
Memory per plugin execution~5 MB sandbox overhead + runtime

Network
performance

Latency from production agents back to the control plane, measured in milliseconds. The agent adds negligible round-trip overhead.

sentra → control plane (same region)1.28 ms avg
sentrazero → control plane (same region)1.00 ms avg
ARM64 agent → control plane~2 ms

All agents deployed on Oracle Cloud Mumbai alongside the Supabase control plane. Cross-region deployments will see 50–200 ms RTT depending on location.

Embedded,
not bolted on

Security features compiled into the agent binary. No separate components needed.

Seccomp BPF

215 allowlisted syscalls, default-deny policy (x86_64). Embedded in the agent binary. No separate wrapper binary required.

Ed25519 plugin signing

Every plugin is signed on upload and verified before execution. Automatic, no manual steps.

Linux namespace isolation

User, PID, mount, UTS, IPC, and net namespaces for every plugin execution. Verified operational on all agents.

Cross-platform

Native binaries for Linux and macOS (13–14 MB) and Windows (~8.8 MB). Platform-native sandbox on each OS: seccomp (Linux), Seatbelt (macOS), Job Objects + firewall (Windows).

What the platform
delivers

All capabilities verified against live production agents.

Data Sovereignty

Zero client data rows in control plane, verified by direct database queries.

Seccomp Sandbox

Embedded in agent binary with default-deny syscall filter.

Plugin Signing

Ed25519 auto-sign on upload, verify on every execution.

Multi-Runtime

Python, Node.js, Go, Rust, native binaries. One sandbox, any language.

GPU Scheduling

Auto-routing to GPU-capable agents via pgvector matching.

Resource Limits

Memory, CPU, and timeout enforcement via namespace isolation.

Auto-Update

Background agent update check every 24h and on startup.

Rich Media Detection

File header auto-detection for images, video, PDF, and audio.

SentraZero agent

Run your own
benchmark.

Deploy the agent on your infrastructure and measure real performance on your data. No commitment, no data leaving your network.