Share links

A share link lets someone without an account read a completed scan’s report in the browser. Links are read-only, expire, and can be revoked at any time.

Create a link

On the scan page, or in the Scan History row menu, select Share. Set:

• Expiry: 1 hour, 24 hours, 3 days, 7 days or 30 days.
• Recipient (optional): printed on the page as a watermark.
• What the link shows: Full report or Masked report. A masked link needs the privacy policy to be on.

Select Generate and copy the link. The same dialog lists existing links with their state, expiry, masking and creator, and lets you copy or revoke each one.

What the recipient sees

The link opens a self-contained report page with the summary, scope, severity counts, findings, components and methodology. The footer shows the recipient watermark and the expiry. The recipient cannot open the console, download files or re-share the link.

Expiry and revocation

• Revoke takes effect immediately.
• An expired, revoked or unknown link returns a not-found page. So does any link on an instance whose licence has ended.
• If the privacy policy is turned off, masked links stop serving rather than show unmasked content.
• Every view is recorded in the audit log.

Through the API

# Create a masked link that expires in 7 days
curl -sSf -X POST "$CERBERON_URL/api/jobs/$JOB_ID/share" \
  -H "Authorization: Bearer $CERBERON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"hours": 168, "masked": true, "recipient": "External auditor"}'

# Revoke a link
curl -sSf -X POST "$CERBERON_URL/api/shares/$SHARE_ID/revoke" \
  -H "Authorization: Bearer $CERBERON_TOKEN"

hours accepts 1 to 720. The default is 72.