Skip to content

Quickstart

This guide takes a Linux host from nothing to a first scan result. Allow about 30 minutes, most of it the one-time build of the scanner tools.

You need a Cerberon licence key (CRB-...), a 64-bit Linux host with 4 CPU cores, 8 GB of memory and 50 GB of free disk, Docker Engine, and port 443 free. The full list is in System requirements.

  1. Install Cerberon. Run the installer as a user who can use Docker without sudo:

    Terminal window
    curl -fsSL https://license.cerberon.dev/install.sh | sh

    The installer checks the host, asks for your licence key, builds the scanner tools (15 to 25 minutes) and starts Cerberon. It ends by printing the address to open.

  2. Create the first administrator. Open the printed address, for example https://cerberon.example.com. Enter the one-time setup token shown by the installer, then choose a username and a password of at least 10 characters. If you lose the token, run cerberon setup-token on the host.

    Cerberon serves its own certificate until you install yours, so the browser shows a certificate warning on first use. See TLS and reverse proxy.

  3. Start a code scan. Select New Scan, choose Code (SAST), enter a Git repository address and keep the Scanner mode. On Review, confirm that you are authorised to scan the repository and select Start scan.

  4. Review the findings. When the scan completes, open Findings. Each finding shows its evidence, location and recommended fix. Set a state, an owner or a due date under Manage Finding.

  5. Download the report. On the scan page, select Download and choose PDF, HTML, CSV, SARIF or JSON.