Sentinel ships as a single self-contained binary with no runtime dependencies. Download the binary for your platform, make it executable, and you are ready to scan.

Download

Binaries are published to releases.grantflow.cloud for every tagged release. Use the latest release URLs below — they always resolve to the current version.

Windows

# AMD64 (most systems)
Invoke-WebRequest -Uri "https://releases.grantflow.cloud/releases/sentinel/latest/windows-amd64/grantflow-sentinel.exe" -OutFile "grantflow-sentinel.exe"

# ARM64
Invoke-WebRequest -Uri "https://releases.grantflow.cloud/releases/sentinel/latest/windows-arm64/grantflow-sentinel.exe" -OutFile "grantflow-sentinel.exe"

macOS

# Apple Silicon (M1/M2/M3)
curl -Lo grantflow-sentinel https://releases.grantflow.cloud/releases/sentinel/latest/darwin-arm64/grantflow-sentinel
chmod +x grantflow-sentinel

# Intel
curl -Lo grantflow-sentinel https://releases.grantflow.cloud/releases/sentinel/latest/darwin-amd64/grantflow-sentinel
chmod +x grantflow-sentinel

Linux

# AMD64
curl -Lo grantflow-sentinel https://releases.grantflow.cloud/releases/sentinel/latest/linux-amd64/grantflow-sentinel
chmod +x grantflow-sentinel

# ARM64
curl -Lo grantflow-sentinel https://releases.grantflow.cloud/releases/sentinel/latest/linux-arm64/grantflow-sentinel
chmod +x grantflow-sentinel

Add to PATH (optional)

To run grantflow-sentinel from any directory, move the binary to a location on your PATH.

macOS / Linux:

sudo mv grantflow-sentinel /usr/local/bin/

Windows — Move grantflow-sentinel.exe to a folder that is included in your PATH environment variable, such as C:\Windows\System32 or a custom tools directory.

Verify

grantflow-sentinel --version

You should see the version, commit hash, and build date printed to your terminal.

Current version

Check the latest release and version manifest at:

https://releases.grantflow.cloud/releases/sentinel/latest.json

The manifest contains the current version string and build timestamp.

System requirements

Requirement	Details
Operating system	Windows 10+, macOS 12+, Ubuntu 20.04+ / Debian 11+, RHEL 8+
Architecture	AMD64 or ARM64
Internet access	Required for cloud mode (Microsoft Graph API)
Browser	Required for interactive login (cloud mode without --device-code)
PowerShell	Required for ad mode (Windows or PowerShell 7 on macOS/Linux)

Linux scans

The linux mode reads system files (/etc/shadow, /etc/sudoers.d/, etc.) that require root or sudo access. Run Sentinel with sudo for full coverage on Linux hosts.