Company

Built to solve a problemthat kept appearing.

Cerbi provides customer-hosted application logging governance for platform and security teams. Find unsafe logging, define policy, apply it at selected application or OTLP log boundaries, and retain evidence of what was governed.

Origin

The problem showed up the same way every time. A security review, a compliance audit, or an incident investigation would reveal that PHI was already in Splunk. Tokens were already in CloudWatch. Audit trails that were supposed to be clean had been contaminated for months. Every team had already shipped the problem before anyone knew to look.

Existing platforms and framework filters can provide effective redaction and processing. The question is whether those controls meet a particular application logging requirement and retain the evidence your team needs. Cerbi is relevant when a material gap remains.

CerbiStream applies policy on integrated logging paths inside selected applications. Gateway provides another boundary for explicitly routed OTLP logs. CerbiShield manages versioned policy, targets, rollout, and recorded evidence across those connected paths. Initial integration and customer configuration are required.

The goal is a product that makes the right behavior the default behavior - one that ships into existing .NET logging frameworks without requiring a rewrite and with measurable runtime overhead.

Cerbi

Available through Microsoft Marketplace

Customer-hosted Azure Managed Application

Harvard Innovation Labs

i-Lab venture program participant

MIT

Open Source (MIT)

CerbiStream SDK is fully open source on GitHub

Based in

Fort Myers, FL

United States

Advisor

Waseem Kawaf

Coach, Harvard Innovation Labs i-Lab

Background

Built by someone who has lived the problem

Cerbi was founded by Thomas Nelson, a principal-level software architect with experience across .NET, Azure, distributed systems, DevSecOps, identity, observability, and enterprise governance.

Cerbi comes from real platform work, not a theory exercise. The problem is simple: companies often have logging standards, but those standards rarely execute where logs are created.

Cerbi exists to move that control closer to the application, before sensitive fields, inconsistent schemas, and noisy events reach downstream systems.

Relevant background

Principal-level software architect

Enterprise .NET, Azure, DevSecOps, and distributed systems

Author of Introducing Microsoft Orleans

Available through Microsoft Marketplace

Harvard Innovation Labs participant

Builder of CerbiStream, CerbiShield, runtime governance, analyzers, and signature packages

What this means for Cerbi

Source-first governance

Cerbi focuses on governing logs before they leave the application, not just detecting problems after ingestion.

Developer-friendly rollout

Start in observe mode, add guidance, and enforce only when rules are trusted.

Enterprise-aware design

Policy management, RBAC, reporting, scoring, deployment history, and audit evidence are designed for real operating environments.

Honest boundaries

Cerbi does not replace logging vendors, does not guarantee compliance certification, and does not use AI to silently control production policy.

A note from the founder

“I built Cerbi because I kept seeing the same gap: teams had logging standards, but no practical way to make those standards execute where logs start. Cerbi is meant to help developers ship safer logs without forcing a big-bang migration or replacing the tools they already use.”

Thomas Nelson, Founder of Cerbi

Get started

Want to understand how Cerbi fits your logging stack?

NEXTChoose your next proof

Review a Scanner finding or logging requirement against your existing controls. If a recurring gap remains, scope one CerbiShield workload, policy, evaluation window, and evidence review.

One initial workload/Customer-hosted in Azure/Existing destinations remain
About - Cerbi | Cerbi