Built to solve a problemthat kept appearing.
Cerbi provides customer-hosted application logging governance for platform and security teams. Find unsafe logging, define policy, apply it at selected application or OTLP log boundaries, and retain evidence of what was governed.
Origin
The problem showed up the same way every time. A security review, a compliance audit, or an incident investigation would reveal that PHI was already in Splunk. Tokens were already in CloudWatch. Audit trails that were supposed to be clean had been contaminated for months. Every team had already shipped the problem before anyone knew to look.
Existing platforms and framework filters can provide effective redaction and processing. The question is whether those controls meet a particular application logging requirement and retain the evidence your team needs. Cerbi is relevant when a material gap remains.
CerbiStream applies policy on integrated logging paths inside selected applications. Gateway provides another boundary for explicitly routed OTLP logs. CerbiShield manages versioned policy, targets, rollout, and recorded evidence across those connected paths. Initial integration and customer configuration are required.
The goal is a product that makes the right behavior the default behavior - one that ships into existing .NET logging frameworks without requiring a rewrite and with measurable runtime overhead.

Available through Microsoft Marketplace
Customer-hosted Azure Managed Application
Harvard Innovation Labs
i-Lab venture program participant
Open Source (MIT)
CerbiStream SDK is fully open source on GitHub
Based in
Fort Myers, FL
United States
Advisor
Waseem Kawaf
Coach, Harvard Innovation Labs i-Lab
Background
Built by someone who has lived the problem
Cerbi was founded by Thomas Nelson, a principal-level software architect with experience across .NET, Azure, distributed systems, DevSecOps, identity, observability, and enterprise governance.
Cerbi comes from real platform work, not a theory exercise. The problem is simple: companies often have logging standards, but those standards rarely execute where logs are created.
Cerbi exists to move that control closer to the application, before sensitive fields, inconsistent schemas, and noisy events reach downstream systems.
Relevant background
Principal-level software architect
Enterprise .NET, Azure, DevSecOps, and distributed systems
Author of Introducing Microsoft Orleans
Available through Microsoft Marketplace
Harvard Innovation Labs participant
Builder of CerbiStream, CerbiShield, runtime governance, analyzers, and signature packages
What this means for Cerbi
Source-first governance
Cerbi focuses on governing logs before they leave the application, not just detecting problems after ingestion.
Developer-friendly rollout
Start in observe mode, add guidance, and enforce only when rules are trusted.
Enterprise-aware design
Policy management, RBAC, reporting, scoring, deployment history, and audit evidence are designed for real operating environments.
Honest boundaries
Cerbi does not replace logging vendors, does not guarantee compliance certification, and does not use AI to silently control production policy.
A note from the founder
“I built Cerbi because I kept seeing the same gap: teams had logging standards, but no practical way to make those standards execute where logs start. Cerbi is meant to help developers ship safer logs without forcing a big-bang migration or replacing the tools they already use.”
Thomas Nelson, Founder of Cerbi
The product

CerbiStream
In-process enforcement engine. Runs inside your .NET application, intercepts log events at emission, and applies governance rules before any sink is called.

CerbiShield
Governance management console. Deploys into your Azure tenant. Manages rules, roles, and audit trails across every service without requiring application code changes.
Get started
Want to understand how Cerbi fits your logging stack?
