OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Developer Tools

sentio

sentio is a Rust command-line security scanner that analyzes Solana Anchor programs for vulnerabilities through AST-based rules and produces local scan reports.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

sentio — OpenViST project profile in Developer Tools.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use sentio for a local pre-audit scan of an Anchor workspace, or when you need structured findings to feed into a code-scanning or reporting workflow.

Who it is for

  • Solana developers working on Anchor programs
  • Teams preparing Anchor code for an audit
  • Developers who want scan findings in CI or downstream tooling

Documented uses

  • Scan an Anchor workspace or Rust file for security findings without building the project.
  • Set severity thresholds that determine when a scan returns a failing exit code.
  • Export findings as SARIF, JSON or Markdown for code-scanning workflows, other tools or documentation.
  • Use a baseline to focus later scans on findings not already recorded.
Before you choose

Requirements & limits

The documented installation method is `cargo install sentio-cli`. Rust 1.85 or later and Cargo are required.

  • Scans do not build the project and the scan command makes no network calls.
  • The CLI supports human-readable, JSON, SARIF and Markdown output.
  • The default failure threshold is low; --fail-on high fails on high- or critical-severity findings.
  • The separate version command makes a brief network call to check for updates; telemetry can be disabled with SENTIO_NO_TELEMETRY=1.
  • The README identifies limits relating to ZK, cross-program and AST analysis in separate documentation.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Install sentio and scan an Anchor workspace

Install the CLI and run a local scan from an Anchor workspace root.

Before you start

  • Rust 1.85 or later
  • Cargo
  • An Anchor workspace with Anchor.toml

Steps

  1. Install the CLI with the command below.

    Documented command
    cargo install sentio-cli

  2. From the workspace root, run sentio scan ..

Expected outcome

sentio scans the workspace and displays findings in its default human-readable format.

Guide limitations

  • The scan analyzes syntax trees and does not build the project.
  • The README links to separate limitations documentation covering ZK, cross-program and AST limits.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
13 October 2026
Original website title
sentio-security/sentio-rs · Official homepage title · retained in its source language
How we review sourcesSuggest a correction