Home Products Sentinel
Product · Protect the platform

Sentinel

Perimeter defense for platform write paths: coordination and bot-farm detection built on velocity, subnet, and pattern signals — behavior, never identity.

The problem it solves

Bot farms don’t announce themselves. They arrive as dozens of individually plausible accounts — and only look like an attack when you can see them together. Sentinel is the layer that sees them together.

How it decides

Sentinel scores activity at the platform’s write paths on coordination signals: how fast actions arrive, how much “different” traffic shares network space, and how much supposedly independent content follows one template. Individual users are never judged on who they are — only patterns of behavior trip the perimeter.

Defense in depth: the tarpit

Rejection is not the only answer at the edge. Automated attackers probing the perimeter can be routed into a tarpit — connections that stay open, respond slowly, and burn the attacker’s resources instead of your moderators’ time. The perimeter absorbs; the platform never notices.

Verified behaviors

Every claim below maps to a dated behavioral proof against the live production gateway.

Under a real coordinated attack, the defensive escalation tier fires automatically and absorbs the load.
method: multiple distinct source IPs sustained a coordinated request load directed at the origin, isolated from the upstream mitigation layer · observed: overflow capacity was provisioned automatically at the production threshold, then decommissioned cleanly; escalating challenges were issued under load · VERIFIED July 7, 2026

Honest limitations

Download the white paper (PDF)

Evaluate it against your platform

Book a demo

Where this fits

Candor works at the intersection of gaming safety, age assurance, privacy, parental consent, cryptographic evidence, and auditable trust & safety decisions. Related: