Documentation
DENIS documentation
The full documentation lives with the releases on GitHub, and is also built into the DENIS console. Start with the guide that matches what you want to do.
Start
New to DENIS? Read these first.
Use
Working with the console day to day.
- Asset managementOwners, locations, warranties, the review queue, CSVdocs/asset-management.md
- Detection rulesEvery rule, its score and how to tune it; findingsdocs/detection-rules.md
- IncidentsHow related alerts are grouped and prioritiseddocs/incidents.md
- AlertingSlack, Teams, e-mail, PagerDuty, ntfy, Jira, ServiceNow, webhooksdocs/alerting.md
- OT guideUsing DENIS safely on industrial networksdocs/ot-guide.md
- SwitchesSNMPv2c and SNMPv3 topology, MAC-to-port mapping, switching a port offdocs/switches.md
Respond
Optional and experimental: acting on what DENIS found.
- Setup guidesStep-by-step setup for the switches, firewalls and controllers DENIS can act throughtree/main/docs/nac/
- EnforcementOptional response actions on the equipment you own, and the automation levelsdocs/enforcement.md
- AutopilotExperimental alert triage with questions on your phone; off by defaultdocs/autopilot.md
Run
Installing, operating and updating DENIS.
- DeploymentInstaller, HTTPS, users, remote sites and agentsdocs/deployment.md
- DockerThe demo, a collector or a remote agent in a containerdocs/docker.md
- High availabilityTwo nodes on one PostgreSQL database: setup, load balancer, testing a failover, what is guaranteeddocs/high-availability.md
- OperationsBackups, demo data, retention, Prometheusdocs/operations.md
- UpdatesSigned updates, rollback, agent updates and the usedenis.com fallbackdocs/updates.md
- MSP managementRemote management of a customer’s DENIS by its MSPdocs/msp-management.md
Integrate
Getting data out of DENIS and into your other tools.
Trust
How DENIS protects itself.
- SecurityThreat model, hardening, verificationdocs/security.md
- Security tools that may flag DENISExactly what DENIS sends (ARP sweep, ping, port scan), why an IDS or endpoint product may report it, and how to allow or reduce itdocs/security-tools.md
- Cyber Resilience Act readinessWhat is in place, what is open, with the evidence for each item; not a compliance claimdocs/compliance/CRA.md
- Software bill of materialsCycloneDX and SPDX lists of every component, published with each releasedocs/compliance/SBOM.md
Help
When something does not work.
About
Background, licensing and what is next.
- AI (optional)What the optional AI features dohttps://github.com/stefanmesaros/denis#features
- ArchitectureThe processing pipelinehttps://github.com/stefanmesaros/denis#architecture
- Architecture guideHow the program is built, module by moduleARCHITECTURE.md
- LicensingThe Community LicenseLICENSE
- RoadmapWhat is nextROADMAP.md
- ChangelogWhat shipped in each releaseCHANGELOG.md
Documentation links open on GitHub. Every one of them was checked on 2026-10-14.