Walters Sentinel
Security and compliance that fits how your organisation already runs.
Your people sign in through your own identity provider, join and leave automatically, and use passkeys instead of passwords. Your data is encrypted throughout, and your procurement team gets the documents it needs without a back and forth.
Your sign-in, your rules.
Walters Sentinel works with the identity provider you already run, so access follows the decisions your IT team already makes.
Company sign-in (SSO)
Sign in through any identity provider that supports OpenID Connect, including Okta, Microsoft Entra ID, Google Workspace, JumpCloud and OneLogin. From the Business plan.
Required for your domain
Prove you own your email domain once, then require company sign-in for everybody at it. Passwords and other sign-ins stop working for them, and your owner keeps a way back in if your provider ever has a problem.
Automatic provisioning (SCIM)
Your identity provider adds people, updates them, and removes them the moment they leave, signing them out everywhere. It can only ever add addresses at your own domains. With Premium and Enterprise.
Passkeys
Sign in with a face, fingerprint, device PIN or security key. A passkey cannot be phished, because it only works on Walters Sentinel's own pages.
Two steps, always
Every sign-in with a password also needs a code we email. There is no way to turn it off, no "trust this device" shortcut, and repeated wrong passwords lock the account.
Microsoft, Google and Apple
Smaller teams without their own identity provider can sign in with a Microsoft, Google or Apple account, with one Walters Sentinel account per email address, whichever way they come in.
Many teams, sites and clients, one view.
Organisations and branches
Run several organisations, and branches for each site or office, from one account, each with its own people and settings.
Roles you define
Give people exactly the access their job needs, with roles you make yourself rather than a fixed list.
Tamper-evident audit log
Important changes are recorded with who made them and when, on a chain of checksums that shows if anything was altered afterwards.
Access reviews and leavers
Regular reviews of who can reach which systems, and a leaver check that makes sure access really ends when somebody goes.
For MSPs and IT providers
Each client in their own organisation, monitored from one dashboard, with white-label reports, SLA reports and a client portal.
An API
Connect Walters Sentinel to your own systems with API keys, and let other tools sign people in with their Walters Sentinel account.
The answers your security review will ask for.
Everything below is published, so your team can check it before we ever speak.
Encryption
Personal and business data is encrypted in the application, with AES-256-GCM, before it reaches the database, with a key only our server holds. Backups are encrypted too. Signing in, passwords and tokens are never stored in a form anybody can read.
Where data lives
Application servers in London, the database in Ireland (EU), and email sent from London. Every supplier and where it is, on the sub-processor list.
Contracts
A Data Processing Agreement that is part of our Terms, and 30 days notice before any new sub-processor handles personal data, with a right to object.
Your data, your control
Admins can export everything an organisation holds, and anybody can download their own data or close their account themselves, without asking us.
Proof for your customers
Certificates anybody can check, and a Trust Centre your customers can read, both kept up to date by the checks Walters Sentinel already runs.
Security reports
A published way to report a security problem, with a reply from a person within three working days.
Buying
Monthly or yearly on any plan. Enterprise is set up with you directly: we agree the price with you, and the first payment can be made by bank transfer or invoice.
Planning a rollout?
Tell us how many people, organisations and sites, which identity provider you use, and what your security review needs. A real person replies, usually within one working day.