SentinelDeck 2.2.0

SentinelDeck now scans IP addresses as well as domains, and turns a single target into real exposure, vulnerability, and footprint intelligence — all passive, all keyless. This release bundles everything from 1.2.2 through 2.2.0.

Scan IPs, not just domains (2.0.0)

• The search box and sentineldeck scan accept a domain, a bare IP (v4/v6), or a URL, and auto-detect which it is.
• For an IP: geolocation + ASN, network allocation via RDAP (owning org, CIDR, abuse contact), reverse-IP hosted domains, reverse DNS, reputation, TLS, and HTTP. Private/reserved IPs run only the locally reachable surfaces.

Exposure + CVE intelligence (2.1.0)

• Shodan InternetDB (free, keyless) for the host's open ports and known CVEs — returned passively, without scanning the target.
• CVEs are cross-referenced with the CISA Known Exploited Vulnerabilities catalog, so actively-exploited ones are flagged and scored.
• SaaS footprint: the vendors a domain leaks through its TXT/SPF/MX records, decoded into a readable profile (Microsoft 365, Google Workspace, Atlassian, Shopify, Stripe, Jamf, and more).

Network footprint mapping (2.2.0)

• From the resolved host, the owning ASN and every announced prefix (via RIPEstat) — one domain or IP reveals the organisation's whole routed IP estate, with the total IPv4 address space.

Dashboard (1.3.0)

• A live telemetry console streams each surface as it runs, with a short result summary, an elapsed clock, and a blinking cursor.
• Masonry card layout so a tall card no longer stretches its neighbours; new cards for exposure/CVEs, SaaS footprint, network allocation, reverse IP, and ASN footprint.

Reliability (1.2.2)

• A single failing probe can no longer abort a scan — every surface degrades on its own.
• Added type checking (mypy), coverage gating, and a headless dashboard-render check to CI.

Full details in the CHANGELOG.