Platform

The complete platform for web correctness.

ConsoleSentinel is not a scanner. It is a multi-tenant, identity-anchored, governance-aligned platform that enforces correctness across your entire digital surface — from browser-level crawling to institutional audit trails.

System Architecture

                    ┌──────────────────────────────┐
                    │        Tallawah CIAM          │
                    │  (Identity, Tokens, Roles)    │
                    └───────────────┬──────────────┘
                                    │
                                    ▼
                      ┌────────────────────────┐
                      │   ConsoleSentinel API   │
                      │  (Auth, Tenants, Scans) │
                      └─────────────┬──────────┘
                                    │
         ┌──────────────────────────┼──────────────────────────┐
         ▼                          ▼                          ▼
 ┌──────────────┐         ┌────────────────┐         ┌──────────────────┐
 │  Browser      │         │ Event Pipeline │         │ Security          │
 │  Crawler      │         │ (292 EventKinds│         │ Detectors         │
 │  (Chromium)   │         │  27+ Modules)  │         │ (DAST, OWASP)     │
 └──────┬────────┘         └────────┬───────┘         └────────┬─────────┘
        │                           │                          │
        ▼                           ▼                          ▼
 ┌────────────────┐       ┌──────────────────┐       ┌────────────────────┐
 │   SDK Layer     │       │  Reporting       │       │ Observability      │
 │ (JS, Python,    │       │  (JSON, HTML,    │       │ (Logs, Metrics,    │
 │  Node, React)   │       │   PDF, Webhooks) │       │  Traces, Audit)    │
 └────────────────┘       └──────────────────┘       └────────────────────┘

Platform Layers

Six integrated layers working in concert to deliver complete correctness coverage.

Deep Browser Crawler

A full Chromium environment that navigates your site exactly as your users do. DOM, network, console, storage, cookies, visual state — all captured in parallel across every page.

27+ Auditor Modules

Modular detection engine. Each auditor is a specialized inspector — console errors, network intelligence, DAST security, deep SEO, visual AI regression, performance, accessibility, and more.

292 EventKinds

Every finding becomes a structured EventKind with severity, category, source location, and remediation guidance. A unified schema across all detection domains.

Tallawah-Native Identity

All authentication, authorization, and tenant isolation is handled by Tallawah CIAM. No local identity logic — institutional-grade guarantees by design.

Multi-Tenant Architecture

Every scan, every result, every integration is tenant-scoped. Tenant ID is derived from Tallawah claims. Cross-tenant access is impossible without superadmin elevation.

Observability Layer

Structured logging, distributed tracing, metrics, and immutable audit logs. Every scan is tracked, every event is attributable, every anomaly is surfaceable.

Governance Principles

Every design decision is governed. Every behavior is deterministic. Every output is trustworthy.

Read-Only by Design

ConsoleSentinel observes and reports. It never mutates your application, database, or infrastructure. Safe by construction.

Deterministic Scanning

Same input produces the same output. No randomness, no sampling, no probabilistic shortcuts. Every scan is reproducible.

Zero Noise

Only actionable signals surface. Informational chatter is suppressed. Every finding has severity, context, and remediation.

Governance Enforcement

Architecture Decision Records (ADRs) govern every design choice. No ad-hoc decisions. No exceptions without documented rationale.

Ready to see the platform in action?

Start with a single scan. Scale to enterprise governance.