Sentry Security

Authored by:

Auditware

Auditware

Summary

🔑 Key Takeaway: Secure your Sentry account by enabling two-factor authentication, regularly reviewing API tokens and authorized applications, and ensuring organization-wide security policies are enforced. Remove any unnecessary integrations and audit team member access to minimize attack surface.

This checklist is adapted from Auditware's W3OSC standards.

For Individuals

These settings apply to your personal Sentry account. All team members and admins should configure these on their own accounts.

Individual Account Settings

• User Settings >

For Team Members

These guidelines apply to team members who use Sentry but don't have full administrative access.

Team members should:

• Ensure their individual account settings are configured according to the checklist above
• Enable two-factor authentication on their account
• Regularly review and remove any unnecessary API tokens or authorized applications
• Report any suspicious activity or unrecognized access to administrators

For Admins

These settings and practices apply to Sentry organization administrators with elevated privileges.

Organization Settings

• Organization >

Developer Settings

• Developer Settings >

Further Reading

• Account Management overview: how these product guides fit together
• Monitoring overview: what error and event data should feed into detection
• Access Management: scoping who can read production error data
• Sentry: authentication: vendor documentation for SSO and 2FA enforcement