Quick Start

This guide gets Ferro Sentry installed and auditing your server security posture in under 5 minutes. You'll need a server running Linux (x86_64 or ARM64) or Windows.

Step 1 — Get your token

Log in to the SecuryBlack dashboard and generate an agent token from the Settings → Tokens page. It will look like fs_live_xxxxxxxxxxxx.

If you're self-hosting your own OTLP collector, you can set FERROSENTRY_ENDPOINTdirectly to your collector's gRPC address.

Step 2 — Install the agent

Linux

Terminal
curl -fsSL https://install.ferrosentry.dev | sudo bash

Windows (PowerShell — run as Administrator)

PowerShell
irm https://install.ferrosentry.dev | iex

The installer will prompt for your token, detect your architecture, download the correct binary, and register the agent as a system service with automatic restart.

Step 3 — Verify the agent is running

Linux

bash
systemctl status ferrosentry
Expected output
● ferrosentry.service - Ferro Sentry Security Agent
     Active: active (running)

Windows

powershell
Get-Service -Name FerroSentry

Step 4 — Check security auditing logs

Within minutes of starting the agent, posture findings should appear in your dashboard or gRPC backend. You can also tail the logs to confirm:

Logs
# Linux
journalctl -u ferrosentry -f

# Windows
Get-EventLog -LogName Application -Source FerroSentry -Newest 10
Expected log output
INFO ferro_sentry: agent started, auditing posture
INFO ferro_sentry: port scanner completed (0 unauth exposed DBs found)
INFO ferro_sentry: vuln scanner completed (SSH RootLogin disabled)
That's it. Ferro Sentry is now running and protecting your server posture. The agent will also check for updates daily and self-update automatically.

Next steps