Sign in

Sentinelleai holds one account per operator. There is no self-registration: the first account is created with scripts/auth-bootstrap.ts, which refuses once any account exists.

Failed attempts are counted per account and per source address, and both counts are written to the activity log. The source count is best-effort: it reads a header the client can set, so it slows a careless attacker and not a careful one.