Observed arrival · 2026-09-30
SentinelAI publishes its misses alongside its alerts
An open-source intrusion detector for home and small-office networks, with plain-language alerts and public test results.
- For
- Home-network and small-office operators
- Worth noticing
- Its check-in rule is off by default after flagging a code editor and Claude apps 50 times during a 24-hour laptop test.
Field notes
The detection layer is described as eight short Python rules with thresholds in one configuration file, and the check-in rule is disabled by default. Results cover three CIC-IDS2017 days: thresholds were partly tuned on Friday, then frozen for Wednesday and Monday; one earlier results version contained a scoring bug corrected after the held-out test. A separate laptop check found routine code-editor and Claude-app traffic triggered the check-in rule 50 times in 24 hours.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue