Free or Pro?
The free edition already locks down access and reveals known vulnerabilities. Pro blocks the attacks.
Free
Free
No time limit, no subscriptionLock down access, see known vulnerabilities and keep a usable record of what happens on the store.
- Complete back-office two-factor authentication
- Vulnerability scanner: 1 scan / 24 h, issues published more than 30 days ago
- Back-office IP firewall
- Security logs and dashboard
- Cloudflare, multistore, environment checks
Recommended
Pro
€29.90 excl. tax
Per month, per installationFor stores that are exposed: attacks are rejected, suspicious files stand out, and checks run on their own.
- Everything in Free, plus real-time blocking
- WAF, anti-DDoS and brute-force protection
- File integrity monitoring, with a diff
- Unlimited scans and the newest vulnerabilities
- Automatic checks and email notifications
Sentinel Pro is available by buying direct from BCISoft, subscribing online, or on PrestaShop Addons: 3 months of Sentinel Pro included, to activate before the subscription continues on Stripe.
Feature by feature
| Feature | Free | Pro |
|---|---|---|
| Dashboard | ||
| Sentinel dashboard, KPIs and PrestaShop widget | ||
| Alert when a new module version is available | ||
| Brute-force, anti-DDoS and last integrity-check cards | ||
| Back-office two-factor authentication | ||
| TOTP app, passkeys, FIDO2 keys, backup codes and trusted devices | ||
| Per-profile policy, compliance deadlines and reminders | ||
| Employee management: enrolments, exemptions, session and device revocation | ||
| Vulnerability scanner | ||
| PrestaShop core and modules, severity, CVE identifiers and CVSS scores | ||
| Number of scans | 1 / 24 h | Unlimited |
| Vulnerability database | Published more than 30 days ago | All of them, including same-day disclosures |
| History, CSV / JSON / TXT export and “mark as fixed” | ||
| Automatic daily scan and email notification | ||
| Back-office access control | ||
| Administration restricted to trusted addresses (IPv4, IPv6, CIDR), stealth redirect | ||
| Blocked-access logging and safeguards against accidental lockout | ||
| Security logs | ||
| Login failures, sensitive requests, 404s and 2FA events | ||
| Direct access to PHP files | ||
| Sensitive data masked, filters, event detail, 7-day retention | ||
| Blocked attacks and brute-force / anti-DDoS bans | ||
| Extended coverage (Auto Prepend) | ||
| Assisted setup and logging of direct PHP access | ||
| Attack detection and blocking on those requests, before PrestaShop starts | ||
| Web Application Firewall (WAF) | ||
| Real-time blocking on the storefront and the back office | ||
| SQL injection, remote commands, module exploits, path traversal, Log4Shell, scanners | ||
| Signatures updated automatically, without waiting for a module update | ||
| Application-level anti-DDoS | ||
| Rate limiting, HTTP 429, then progressive banning | ||
| Relaxed, Balanced and Strict profiles, plus Monitor mode | ||
| Logged-in employees, DNS-verified crawlers and payment callbacks excluded | ||
| Network monitoring and per-path limits | ||
| Brute-force protection | ||
| Bans addresses behind repeated login failures | ||
| Trusted IPs and a permanent blacklist | ||
| File integrity monitoring | ||
| Modified, unexpected or missing files, with a line-by-line diff | ||
| Number of checks | 6 / 24 h, plus an automatic daily check | |
| .sentinelignore exclusions and module checks from a ZIP archive | ||
| History, exports and email notification | ||
| Production | ||
| Cloudflare, reverse proxy and CDN | ||
| PHP environment checks, multistore, French and English interface | ||
| No customer data sent to the scanner: PrestaShop, PHP and module versions only | ||
Command-line tools follow the same split: a command is available only when the feature is included in your plan. Pro price: €29.90 excl. tax per month, per installation.