Vulnerability tracker and Threat Advisor
Your security debt,
in one place.
Every finding from every scan becomes one tracked item with an owner, an SLA and proof. Threat Advisor tells you where to start each morning.
https://sec-01.internal/advisor
Threat Advisor
All projects ยท today
The five fixes to make today.
CriticalOrder IDs readable across customersBreached
CriticalKnown exploited VPN CVEBreached
HighPublic storage bucket4 days
HighExploited logging library5 days
HighAdmin console exposed6 days
Which assets bleed the most. Risk
APIapi.example.com
Codepayments-service
Cloudaws: production
Networkvpn.example.com
Mobilecom.example.wallet
What it does
- One workflowOpen, in review, to fix, fixed, false positive, accepted risk and won't fix. Fixed is confirmed by the next scan.
- SLAs by severity7, 30, 90 and 180 days by default, with breaches on the home page.
- What hurts most todayAdvisories ranked by known exploitation, severity and reach.
- Most at-risk assetsAssets weighted by their open findings across every scan.
- Five fixes for todayThe findings past or closest to their SLA, first.
- Fits your stackREST API, CI gate, signed webhooks, SSO, custom roles and an audit log.
What you get
- Reports in PDF, HTML, CSV, SARIF and JSON, fingerprinted
- Read-only share links that expire
- Bulk changes for up to 200 findings
- Reports your ISO 27001 or SOC 2 auditor can use as evidence
Mapped to
- CVSS 3.1
- CWE
- CISA KEV
- SARIF 2.1.0
How it works
- Scan anythingEvery scan type feeds the same tracker.
- Assign and trackOwners, due dates, accepted risk with expiry.
- Prove itFingerprinted reports and share links for customers.
Documentation
Read the details
Setup, every option and the API, on docs.cerberon.dev.
Common questions
Can I accept a risk without fixing it?
Yes, with a reason and a period from 1 to 365 days. When it expires the finding reopens.
See it on your own systems.
A 30-minute demo on your targets, or install it yourself and start scanning this afternoon.