Quickstart
This guide takes a Linux host from nothing to a first scan result. Allow about 30 minutes, most of it the one-time build of the scanner tools.
You need a Cerberon licence key (CRB-...), a 64-bit Linux host with 4 CPU cores, 8 GB of memory and 50 GB of free disk, Docker Engine, and port 443 free. The full list is in System requirements.
-
Install Cerberon. Run the installer as a user who can use Docker without
sudo:Terminal window curl -fsSL https://license.cerberon.dev/install.sh | shThe installer checks the host, asks for your licence key, builds the scanner tools (15 to 25 minutes) and starts Cerberon. It ends by printing the address to open.
-
Create the first administrator. Open the printed address, for example
https://cerberon.example.com. Enter the one-time setup token shown by the installer, then choose a username and a password of at least 10 characters. If you lose the token, runcerberon setup-tokenon the host.Cerberon serves its own certificate until you install yours, so the browser shows a certificate warning on first use. See TLS and reverse proxy.
-
Start a code scan. Select New Scan, choose Code (SAST), enter a Git repository address and keep the Scanner mode. On Review, confirm that you are authorised to scan the repository and select Start scan.
-
Review the findings. When the scan completes, open Findings. Each finding shows its evidence, location and recommended fix. Set a state, an owner or a due date under Manage Finding.
-
Download the report. On the scan page, select Download and choose PDF, HTML, CSV, SARIF or JSON.
Next steps
Section titled “Next steps”- Install your own certificate or put Cerberon behind your reverse proxy: TLS and reverse proxy.
- Add users and assign roles: Users, roles and projects.
- Connect single sign-on: Sign-in, MFA and SSO.
- Connect an AI provider for agent-assisted scans: AI providers and privacy.
- Gate your CI pipeline on scan results: CI/CD and quality gates.