Source-available · self-hosted · BSI IT-Grundschutz
Your inventory is your structure analysis.
SentryAssets is self-hosted asset management for IT departments in small and mid-sized organisations. It discovers hardware, software and networks automatically, shows what depends on what, and turns the inventory into evidence for BSI IT-Grundschutz.
Community Edition free with no asset limit · your data stays in-house · made in Germany
BSI IT-Grundschutz straight from the inventory
Whoever keeps an inventory has already done most of the structure analysis. SentryAssets guides you through IT-Grundschutz step by step, even without a dedicated information security officer. From the Pro edition on, it models the target objects and passes protection needs along the dependencies; the ISMS add-on adds risk analysis, implementation plan and reference documents.
- Grundschutz++ and the 2023 edition of the Kompendium, with a comparison to pick the right one
- Target objects and protection needs come from the inventory, not from a second list
- A guided path from the information domain to the IT-Grundschutz check
- For every requirement, plain words on what "implemented" means and which evidence is enough
- Evidence as documents right at the requirement, with versions
- Terms as in BSI Standard 200-2, explained where they first appear
Features
Everything for a clean inventory
The Community Edition contains everything an administrator needs for a complete inventory. Free, with no asset limit and no time limit.
Automatic discovery
Agents for Windows and Linux, a collector for network scans with SNMPv3 and LLDP, and matching with Active Directory over LDAPS. New devices arrive as suggestions in Discovery, and you decide with one click.
Asset health without monitoring overhead
CPU, memory, disks, network and GPU in the heartbeat, a traffic light with reasons and a list of what needs attention. Existing monitoring reports its status through the API.
Dependencies and locations
What runs on what, what depends on what, what belongs to what. Locations as a tree down to the room, with links between sites and protection needs by the maximum principle.
Licences, contracts and costs
Software licences with assignment, contracts with deadlines and reminders, documents with versions, and a cost report per month and year for the talk with management.
Racks, ports and cables
A true-to-scale rack editor with ports and connections across racks. LLDP neighbours and SNMP interfaces become suggestions; print labels with QR codes on A4 sheets or tape.
Sign-in, permissions and audit log
Local accounts with mandatory TOTP, optionally OIDC with any identity provider. Every change lands in an audit log with a hash chain that you can verify and export at any time.
Three steps
From an empty server to the IT-Grundschutz check
- 01
Install
Docker Compose on a Linux server, hardened and without root inside the containers. The setup wizard guides you through organisation, location and sign-in.
- 02
Discover
Create a rollout token, run the ready-made install command on your devices, approve networks for the collector. The inventory fills itself.
- 03
Prove
Define the information domain, take target objects from the inventory and work through the IT-Grundschutz check step by step, with evidence at every requirement.
Trust
Built for organisations that take security seriously
An inventory knows every device, every piece of software and every dependency. That is why SentryAssets treats this data the way you expect from your own IT.
Your data stays with you
SentryAssets runs only on your infrastructure. There is no SaaS offering, no telemetry and no connection to the vendor, not even for licence checks.
Security from the start
The agent only reads and only connects outbound: mTLS with TLS 1.3, its own PKI, no command execution. It accepts updates only when signed by the vendor.
Made in Germany, for mid-sized organisations
Developed in Germany, interface in German and English, terminology as used by the BSI. Access and erasure of personal data under the GDPR are built in.
Source-available
Source-available. Verifiable. No surprises.
The entire source code of SentryAssets is public under the Elastic License 2.0. You may read, review, change and build it yourself. One image contains every edition: without a key it runs the Community Edition, a licence key unlocks Pro, Enterprise and the ISMS add-on instantly, without reinstalling. The key is checked offline; the installation sends no usage data.
SentryAssets belongs to the product family of SentryMail, the security awareness training from Germany. Visit SentryMail
Your first inventory in a few steps
Install SentryAssets with Docker Compose, follow the setup wizard and roll out your first agent.