Sentinel Connector for Google Chrome shows a monitored site's security status while you browse. These steps apply where Sentinel has enabled the extension and supplied an official Chrome Web Store installation link. You need Chrome 116 or later. The extension is read-only: it does not scan the open page, install updates or change the monitored site. It shows sites you can view in your organisations that are active and have the required monitoring access, including eligible trial, paid and first-site-free access. A viewer can use it; you do not need to be an organisation administrator. A plan name alone does not establish access to a site.
Install and sign in
- In the Chrome profile you want to use, install Sentinel Connector from the official Chrome Web Store link supplied by Sentinel. If you have no official link or the listing is not available, contact Support. Do not choose a similarly named extension from a search result.
- Open Chrome's Extensions menu and pin Sentinel Connector if you want its icon to stay visible.
- Open its toolbar popup and select Sign in. Complete the Sentinel sign-in page, including any required security steps. You do not need to copy a key or code.
- Return to the site you want to check. The extension compares its host with your monitored sites on your device. Each Chrome profile needs its own Sentinel sign-in.
The toolbar badge shows green for secure, amber for updates waiting, red for at risk or critical, and grey for unknown or an unavailable current result. No badge means the tab does not match a monitored site. The popup shows the site and organisation, status and score, check-in and check times, update counts, core and PHP support, and reported vulnerabilities. Unknown is not zero and does not mean secure. No known vulnerabilities reported is limited to Sentinel's available evidence.
Select Open in Sentinel for the site's page. Refresh reads the stored results again; it does not start a new site check. If the tab is not monitored, the popup says Not a monitored site and offers the Monitored sites list. No monitored sites are available for this account can mean that no site is active and eligible, or that your membership has changed. Check the organisation and site's access in Sentinel.
The site list refreshes about every 30 minutes and summaries are cached for up to 10 minutes. Cached data. The latest status is unavailable. means the displayed result could be old. Use Refresh when the service is available again. A temporary service failure can keep your session and cached results available for a later retry. If Status unavailable. Try later, or sign in to reconnect. continues after the service returns, select Sign in to reconnect. If the extension asks you to sign in, select Sign in. If it says access is unavailable, check that the feature and your site access are still enabled. Do not substitute a dashboard token or site key.
Notices and settings
Open Settings from the extension. Show notices turns notices on or off everywhere. Select Allow notices on monitored sites to grant optional site access. If you decline, the badge and popup still work. A newly monitored site can need permission before it shows notices.
- Threshold: choose Critical vulnerabilities only, Security updates or known vulnerabilities, Also unsupported core, or Also any update. The default is security updates or known vulnerabilities.
- Frequency: choose Each page visit, Once per site per day (the default), or Once per browser session.
- Auto-close seconds: choose between 5 and 120 seconds; the default is 15 seconds.
- Snooze: pause notices for 1 hour, 1 day or 1 week. Select Resume notices to end the pause.
- Find a site: search the site list, grouped by organisation, and read its status as each result loads. Use that site's Show notices to mute or restore it. Also match www and bare domain is an optional choice for that site.
A notice has Details, Dismiss and Don't show for this site. Details opens the extension's site details. Dismiss closes this notice; the chosen frequency still applies. Don't show for this site also turns off its notice setting. You can turn it back on from Settings. The notice closes after its auto-close time. Press Escape to close it.
Notices do not take focus from your page. A site can hide, cover or imitate a notice. Use the extension's toolbar popup for trusted details if a notice is absent or looks wrong. Host matching does not distinguish paths: monitoring example.com/subdirectory matches the whole host. An optional www alias can match the bare domain too.
Privacy and sign-out
The extension reads tab addresses on your device to match monitored sites. It can keep a temporary address reference while a notice is attached to a tab; closing the tab removes that reference. It does not send visited page addresses, page content or browsing history to Sentinel. It downloads the sites you can access and requests security summaries by site identifier. Settings displays your account name and email.
Sign-in tokens and cached site results are held in extension storage. Tokens are sent over HTTPS only to the configured Sentinel services for authentication and authorised requests; they do not go to the sites you visit or Chrome sync. Notice preferences, including muted site identifiers, can sync through your Chrome account. Sentinel records sign-in and session information, such as the connection IP address and browser details, for account security. See the browser extension privacy details.
Select Sign out in the extension to end its session and clear its local account data. Your notice preferences remain. If remote sign-out fails, the extension clears its local session and tells you to use account security. To end a browser's access from Sentinel, open the account menu, choose My profile, then find Browser extensions. The section lists only your signed-in browsers, with their client name, browser and operating system where known, sign-in time and last-use time. Select Sign out beside the browser you want to disconnect. This is available to every signed-in account role and does not let an organisation administrator manage another person's browsers.
The row is removed after sign-out succeeds. If the section says Browser extensions could not be updated. Reload the page to try again., reload before assuming access ended. No browser extensions are signed in means there are no current extension sessions to list. The section is hidden while the feature is unavailable. Disconnecting a browser blocks new authenticated requests; data already cached on that device can remain visible until it checks again. It does not uninstall the extension.
By default, an extension session ends after 30 days without a successful renewal. Your operator can change that period. Account suspension, deletion, password reset and Sign out everywhere also stop renewal. Signing out of the dashboard alone does not sign out the extension; use its own Sign out control or Browser extensions.