One server
The application fetches the public data itself. It only needs outbound HTTPS.
Dawnsentry Self-hosted
The same morning patch list, on your own servers.
For networks whose inventory can't go to a cloud service. You run the containers; your inventory, users and findings never leave your network. The vulnerability data can even cross an air gap as a signed file.
Three ways to run it.
Start on one server and split it later. The containers are the same; one setting picks the role.
Collector and core
A collector in the DMZ fetches the data. The application sits in your secure network and only talks to the collector.
Air gap
No network path at all. Carry a signed bundle file across, as often as your process allows. Each one holds only what changed.
Everything in the hosted service, plus what your own network needs.
Sign in with your directory
FreeIPA, Active Directory or OpenLDAP over LDAPS. Groups decide the organisation and role; people who leave are signed out within the hour.
Events to your log system
Sign-ins, changes, new findings and alerts go to syslog (RFC 5424) or Graylog (GELF) over UDP, TCP or TLS.
Signed from end to end
Licences, data deliveries and container images are all signed. Nothing is loaded or run unless the signature checks out.
Containers only
Two images and Docker Compose, with PostgreSQL alongside. Updates are a version number and a restart.
Several organisations
Departments, subsidiaries or customers, each with its own database schema and role, kept apart by the database itself.
Bring your inventory along
Import hosts from Zabbix 5.0 to 8.0, map your topology and get a health score per network. All of it works offline.
One price a year, with updates and support.
Every tier has unlimited users, directory sign-in, log forwarding, Zabbix import and the collector. Prices are per year in euro, excluding VAT.
Enterprise
€16,900/ year
Up to 5,000 items, 10 organisations
Groups, municipalities and service providers. Air gap included.
Ask for an offerEvaluation
€0/ 30 days
Up to 100 items, every option
Install it, connect your directory, import from Zabbix. Keep everything when you buy.
Ask for an evaluationAir-gap option, €2,000 a year for Standard and Professional: load the data as bundle files. Installation help, €2,500 once: a day with us, remotely, from first start to your directory and log system. More than 5,000 items, or a service-provider set-up? Write to us.
info@dawnsentry.comInvoiced yearly in advance.The subscription renews each year unless you cancel 30 days before.
Updates and e-mail support included.Help with installation, settings and faults, on Danish business days.
Your data stays yours.It never leaves your servers, and it stays usable if you stop. See the licence terms.
Questions
Prefer the hosted service? It's on the front page, with a free plan.
What exactly do we get?
Two container images from our registry (the application, and the web server that also handles HTTPS), an installation kit with Docker Compose files and a step-by-step guide, and a licence file. There's no source code to look after.
Does it contact Dawnsentry?
No. The application never calls home. The licence is checked on the spot with a digital signature, so it works without internet. Only the collector, or a single installation that has internet access, contacts the public vulnerability sources.
How does the vulnerability data reach a network without internet?
A collector in your DMZ fetches the public data and hands it to the application over HTTPS, signed with its own key. In a fully isolated network you carry a bundle file across instead. The application checks the signature before loading anything, and refuses a file that was changed or cut short.
How do updates work?
New versions appear in the registry while your subscription runs. You decide when to update: change the version number, pull, restart. Database changes apply themselves. For air-gapped sites we send a signed image archive.
What happens if we don't renew?
After 14 days' grace, no new vulnerability data is loaded and the application shows a warning. Your inventory, findings and users stay, and you can export them at any time. Versions released after your licence's update period won't start.
What do we need to run it?
A Linux host with Docker Engine 24 or later and Docker Compose v2: 2 CPUs, 4 GB RAM and 20 GB of disk. A collector needs the same. PostgreSQL comes along as a container.
Can we try it first?
Yes: a 30-day evaluation licence with 100 items and every option. Write to info@dawnsentry.com.