Host-native Integrity.
We deploy it.
Arca Sentry is a kernel-level agent that enforces your GPU governance policy on the host itself — intercepting the NVIDIA driver boundary to allow, alert, or block every GPU operation, and sealing each decision into a tamper-evident audit ledger. Nothing leaves the machine.
The Sentry is the host-native primitive designed for environments where you own the stack. We integrate directly with Bare Metal, Private Clouds, and self-managed instances (AWS EC2 / GCP GCE). Our engineers handle the end-to-end integration: attach, tune, sign off, and remain on-call. You receive a turn-key observability dashboard and a direct line to our systems leads the moment systemic drift is detected.
- ✓Host-native · bare metal · AWS EC2 · self-managed instances· private cloud
- ✓Same proprietary engine · two eBPF probes · swappable SLM persona
- ✓Compliance personas live · DoD (IL5/IL6) · HIPAA · Custom LoRA · more on the rack
- ✓Zombie policy enforcement · alert default, block on operator arm · per-host tuned
- ✓Turn-key Grafana + Prometheus dashboard · we ship it
- ✓On-call engineer · for the lifetime of the contract
One engine. Six primitives.
The Sentry is a single host-native agent. These are the capabilities it runs at the driver boundary — explore each, or start with a read-only Efficiency Audit.
- 01
The Nvidia Hook
A four-signal, host-observable model of every GPU operation.
- 02
The Zombie Sentry
Reclaim GPU spend from hung and runaway processes.
- 03
The Exfiltration Gate
An on-host SLM scores suspect ioctls: allow, alert, or block.
- 04
The Memory Wall
Measure memory-bound waste — the engine behind the Efficiency Audit.
- 05
The Persona Switchboard
Hot-swap the compliance persona with zero downtime.
- 06
Nexus Ingest
Roll every host's ledger into one fleet hub. Optional, at scale.
Every dot is a GPU minute.
The bright ones are real work.
We see every kernel launch on every host. The Ledger seals it. Below is one normal week on a sample 24-GPU fleet. The dim stretches are where your CFO is paying for nothing — and where Sentry's zombie policy reclaims VRAM in real time.