One binary,
every platform.
One 12–15 MB Go binary, statically linked. No Docker, no Kubernetes, no dependencies. The seccomp sandbox, GPU scheduling, and every runtime ship inside it. Linux, macOS, and Windows — x86_64 and ARM64, each build CI-verified on the real OS.
The 12–15 MB binary is distributed through your workspace — one download per platform, nothing else to install.
No Docker, no dependencies
Linux, macOS, Windows — amd64 + arm64
Checksum shown per download
Statically linked Go
Download from
your dashboard.
The agent binary is distributed through your workspace — not a public link. Four steps from approved access to an online agent.
Request access
Request access at sentrazero.com. We review the request and provision your workspace. No setup, no waiting once approved.
Open Agents
In the dashboard, go to Agents. Every machine you connect to your workspace lives here.
Download the binary
Pick Linux, macOS, or Windows — x86_64 or ARM64. You get the single 12–15 MB binary with the seccomp sandbox, GPU scheduling, and every runtime built in.
Run it with a claim code
Generate a claim token, run the agent on a machine you own, and it connects to your workspace — ready for jobs.
Verified
platform support.
Six native builds — Linux, macOS, and Windows on x86_64 and ARM64. Every build is smoke-tested on the real operating system in a 6-OS CI matrix before it ships.
Linux
x86_64
Linux
ARM64
macOS
x86_64
macOS
ARM64
Windows
x86_64
Windows
ARM64
Platform-native sandbox on every OS: seccomp allowlist (215 syscalls) + namespaces + cgroups on Linux x86_64; seccomp allowlist (182 syscalls) + NO_NEW_PRIVS + cgroup limits on Linux ARM64; Seatbelt deny-default on macOS; Job Objects + per-job outbound firewall block on Windows.
Verify before
your first run.
Trust the binary before you run it.
Every build in your dashboard carries a SHA-256 checksum. After you download, run shasum -a 256 sentra-agent (on Windows, certutil -hashfile sentra-agent.exe SHA256) and compare the output against the checksum shown next to the download. If they match, the binary is exactly what we shipped.
Plugins are a separate layer: every plugin is Ed25519-signed, and the agent verifies each signature before it executes anything.
Read the security model$ shasum -a 256 sentra-agent
# compare against the checksum in your dashboard
$ ./sentra-agent --help
Ready when
your data is.
Request access, and we will provision a workspace. Then drop the agent on one machine and run your first pipeline in minutes. No Docker, no Kubernetes, no cloud migration.