One binary.
Your data stays put.
Deploy a single 12–15 MB Go agent with the seccomp sandbox, GPU scheduling, and every runtime built in. Python, Node, Go, Rust, Ruby, Bash all run in the same sandbox. Images, video, PDF, CSV are all auto-detected. And your data never leaves your storage.
Seccomp, GPU scheduling, and every runtime built in.
Embedded seccomp filter, default-deny.
Python, Node, Go, Rust, Ruby, Bash.
Only outcomes reach the control plane.
Two parts.
One promise.
The control plane handles orchestration. The agent does the work where your data lives. Your data never moves between them.
Control Plane
The hosted layer that plans and dispatches your jobs. It coordinates the fleet. It never touches the payload.
- Plans and dispatches your jobs
- Stores and signs the plugins you use
- Records outcomes and audit logs
- Never sees your raw data
Agent
(12–15 MB)
One binary that runs where your data lives. Every runtime and every guardrail already inside it.
- One binary, no Docker, no dependencies
- Seccomp, GPU routing, and all runtimes built in
- Auto-detects rich media: images, video, PDF, audio
- Reports outcomes, never your data
How a job
runs
Five steps from deployment to outcome. Every run verified, sandboxed, and logged.
Deploy the Agent
Download one 12–15 MB Go binary onto a machine you own. Seccomp, GPU scheduling, and every runtime are already inside it. No installation, no dependencies. It runs anywhere Linux runs.
Point to Your Data
CSV, images, video, PDF, audio, archives. The agent reads the content, identifies the format, and picks the chunking strategy itself. Nothing gets uploaded, and nothing leaves your storage.
Pick a Plugin
Write plugins in Python, Node.js, Go, Rust, Ruby, or Bash. Every plugin is Ed25519-signed and verified before it runs, and every runtime gets the exact same sandboxing, limits, and GPU routing.
It Runs on Your Hardware
The agent does all the work on your machines. GPU-aware plugins route themselves to GPU devices, and multi-step pipelines run in a single session. No per-step overhead.
Outcomes, Not Data, Get Reported
Clean results and audit logs stay on your side. Only outcome metadata goes back to the control plane. Zero client data, ever.
One sandbox.
Every language.
No runtime gets different security treatment. Python gets the same isolation as Rust. Period.
Native (Go, Rust, C/C++)
Compiled binaries run directly in the embedded seccomp sandbox.
Python
.py files run via the python3 interpreter in the sandbox.
Node.js / JavaScript
.js/.ts files run via node in the sandbox.
Ruby
.rb files run via ruby in the sandbox.
Bash / Shell
.sh files run via bash in the sandbox.
GPU-Aware
Any runtime can flag RequiresGPU. The agent routes those jobs to GPU devices automatically.
Frequently
asked questions
Answers to the most common questions about SentraZero.
Does the agent require Docker or Kubernetes?
No. The agent is a single 12–15 MB Go binary with the seccomp sandbox built in. No Docker, no Kubernetes, no runtime installers. Nothing else to install.
What languages can I write plugins in?
Python, Node.js, Go, Rust, Ruby, Bash, and JavaScript/TypeScript. Native code (Go/Rust/C/C++) runs as compiled binaries; interpreted languages run via their own runtime, all inside the same embedded sandbox.
Where does my data go during processing?
Nowhere. Processing happens where your data lives — a local mount or your object-store bucket. Only outcome metadata and audit logs ever go back to the control plane.
What file types are supported?
CSV, JSON, Parquet, images (JPEG, PNG, WebP, GIF), video (MP4, MKV, AVI, MOV), PDF, audio (MP3, WAV, FLAC), and archives (ZIP, TAR, GZ). The agent figures out the format from the content itself.
How is this different from a cloud processing platform?
Processing platforms make you move your data into their storage, paying egress and taking on compliance risk. SentraZero brings processing to your data, so you keep your data and keep your money.
Ready
to deploy
Download one binary, run any language, process any format. No infrastructure changes. And your compute budget stays yours.