Cerberon documentation
Cerberon is a security testing platform you run on your own machine. It scans source code, dependencies, container images, web applications, APIs, hosts, cloud accounts, Kubernetes clusters and mobile apps, and keeps the findings, reports and evidence on that machine.
Get started
- Check the requirements.
- Install on Linux or Windows 11 with one command and your licence key. A machine with no internet uses the offline installation.
- Create the first administrator when the installer asks, and open the address it prints.
- Start your first scan.
Find your way
| I want to… | Read |
|---|---|
| Know what the machine needs | Requirements |
| Install, or install without internet | Installation |
| Update to a new version, or go back | Updates and rollback |
| Add or renew a licence, or move to a new machine | Licence |
| Run scans, schedule them, or start them from CI | Scanning |
| Use our own domain, certificate and single sign-on | Configuration |
| Control how long data is kept, or delete it | Data, retention and deletion |
| Remove Cerberon from a machine | Uninstall |
| Fix a problem | Troubleshooting |
Where things are
On Linux, and inside WSL on Windows, Cerberon keeps everything in your home folder and one Docker volume:
| What | Where |
|---|---|
| Settings, logs, snapshots, this machine's licence | ~/.cerberon |
| Scans, findings, reports, accounts, keys | the Docker volume cerberon_cerberon-data |
| Installation logs | ~/.cerberon/logs/install-<time>.log |
| Windows installer log | C:\ProgramData\Cerberon\install-windows.log |