Capability Map

Cerbi starts where logs are created, then expands into scanning, policy management, AI telemetry governance, AI-assisted guidance, and cross-runtime governance.

Roadmap items are directional and may change based on customer needs, security review, and release readiness.

Governance Signal Map

From source to governed signal

Cerbi intercepts logging behavior at the source, governs it through the control plane, and delivers clean, governed logs to downstream observability, SIEM, cloud, and data platforms.

01Source

Available

Application Logging Source

Where logs are created. .NET, Node.js, Python, Java, Go - across frameworks and services.

.NETNode.js

Available Today

Available today

.NET Governance Stack

Available Today

Govern structured logging before it reaches downstream systems.

What it does

Adds runtime and build-time governance to .NET logging across Microsoft.Extensions.Logging, ASP.NET Core, Serilog, NLog, CerbiStream, analyzers, and shared governance runtime libraries.

Result

Teams can detect, tag, redact, or enforce logging rules before logs leave the application.

Who it helps

.NET developers, platform teams, application architects, and security teams.

.NETMELASP.NET CoreSerilogNLogCerbiStreamRuntime GovernanceAnalyzer

.NET App

Cerbi Runtime

Governance Layer

Downstream Systems

CerbiShield

Live - Azure Marketplace

Centralize policy management, reporting, scoring, and governance evidence.

What it does

Provides the enterprise control plane for governance profiles, RBAC, Governance Store API, Governance Deploy API, Reporting API, Scoring API, deployment history, audit history, and customer-managed deployment. Currently live on Azure Marketplace. AWS Marketplace and Google Cloud Marketplace distribution is planned.

Result

Teams can manage logging governance centrally instead of scattering rules across repos, wikis, and tribal knowledge.

Who it helps

Platform teams, security teams, architects, compliance reviewers, and enterprise application owners.

Azure MarketplaceAWS Marketplace (Planned)Google Cloud Marketplace (Planned)RBACPolicy ManagementReportingScoringAudit Evidence

Policy Authoring

CerbiShield

Governance Deploy API

App Runtime

Cerbi Scanner

Available - CLI + VS Marketplace

Find risky logging behavior before it ships.

What it does

Scans repositories for unsafe log calls, missing correlation fields, unstructured logging, sensitive field usage, inconsistent event names, and services without governance profiles. Available as a CLI tool (dotnet tool install -g Cerbi.Scanner) and as a Visual Studio Marketplace extension.

Result

Teams get a prioritized logging risk report showing which apps, files, and log patterns need attention first - with no account required.

Who it helps

Developers, security reviewers, platform teams, app onboarding teams, and migration teams.

CLIVS MarketplaceRepo ScanningStatic AnalysisLogging RiskSensitive Field Detection

Repo Scan

Risk Analysis

Prioritized Report

Remediation

Signature Packs

Available Today

Start faster with reusable logging governance patterns.

What it does

Provides starter governance patterns for common logging scenarios such as security events, API activity, audit events, PII handling, financial events, and observability patterns.

Result

Teams get a practical starting point instead of building every logging rule and event pattern from scratch.

Who it helps

Teams that want sane defaults before customizing their own governance profiles.

Signature Packs provide starter patterns and regulatory-aligned governance support. They do not imply certified compliance.

SecurityAPIAuditPIIFinancialObservabilityStarter Patterns

AI Logging Governance

Pro++ opt-in

Govern AI telemetry evidence without turning on the Cerbi AI assistant.

What it does

Adds CerbiShield Pro++ surfaces for connected AI telemetry metadata, observed systems, provider and model context, payload exposure, policy outcomes, scanner findings, runtime log observations, storage posture, and redacted governance evidence. It is separately enabled from the Cerbi AI assistant.

Result

Teams get one governed view across explicitly connected AI logging paths while keeping raw prompt and response storage off by default.

Who it helps

Platform teams, security teams, AI application owners, and compliance reviewers evaluating AI risk.

Current Pro++ AI Logging Governance scope. Universal enterprise-wide AI discovery and autonomous agent action governance remain roadmap work.

AI SystemsProviders & AgentsTokens & CostRedacted EvidenceOptional FlagCustomer Azure

AI Workload

Governed Metadata

CerbiShield

Evidence Review

Building Now

Building now

Cerbi AI Assistant

Building / Planned

Use AI to explain, suggest, and improve logging governance - without giving AI control.

What it does

Helps write starter rules, explain violations, suggest safer structured log shapes, summarize governance posture, and support onboarding.

Result

Teams get faster policy creation and cleaner remediation guidance, while admins still approve changes before they become active policy.

Who it helps

Developers, governance admins, security teams, and platform teams trying to improve logging behavior without manually reviewing every log pattern.

Assistant suggests. Humans approve. Cerbi enforces.

AI AssistantRule SuggestionsViolation ExplanationPolicy ReviewAdmin Approval

Assistant Suggestion

Admin Review

Approved Policy

Cerbi Enforcement

Available

Cross-runtime - now available

Node.js Governance Adapters

Available

Cerbi governance is live for Node.js logging.

What it does

Governs logging in Node.js applications using Winston and Pino, enforcing field requirements, filtering sensitive data, and routing to approved destinations.

Result

Node.js teams can enforce the same governance model already running in .NET services - consistent policy across the stack.

Who it helps

Node.js teams, full-stack organizations, and multi-runtime platform teams.

Node.jsWinstonPinonpm

Winston / Pino

Cerbi Adapter

Governance Layer

Downstream

Cross-Runtime Adapters

Available

One governance model. Python, Java, Node.js, and Go - all live.

What it does

Cerbi governance adapters are available for Python, Java, Node.js, and Go - covering common frameworks including Loguru, structlog, Log4j2, Logback, Pino, Winston, Zap, and Zerolog.

Result

Organizations apply consistent logging governance across all languages, teams, and cloud environments without changing the policy model.

Who it helps

Multi-language engineering organizations, platform teams, and enterprise architecture teams.

PythonJavaNode.jsGoLogurustructlogLog4j2LogbackPinoWinstonZapZerolog

Python / Java / Go / Node.js

Cerbi Adapter

Shared Governance Model

Future Intelligence

Future intelligence

Universal AI Discovery & Autonomous Agent Governance

Planned

Move beyond integrated sources to universal, enterprise-wide AI oversight.

What it does

Plans universal enterprise-wide AI discovery, autonomous agent action governance, universal tool-call enforcement, model-behavior governance, trace and metric correlation, broader cross-cloud execution governance, and full Responsible AI / GRC lifecycle management.

Result

Teams can extend today's AI Logging Governance foundation from integrated sources to broader estate-wide discovery and enforcement as these capabilities mature.

Who it helps

Platform teams, security teams, AI application owners, and enterprise governance teams.

This is planned roadmap work, not implemented today. Current release scope is Cerbi AI Logging Governance: connected AI telemetry metadata, scanner findings, runtime observations, storage posture, and redacted evidence.

Universal DiscoveryAgent Action GovernanceTool-Call EnforcementModel BehaviorResponsible AIPlanned

AI Integrations

Governed Metadata

AI Posture

Evidence

CerbiSense

Exploring

Learn from governance metadata over time.

What it does

Analyzes governance metadata to identify repeated violations, policy gaps, governance drift, noisy logging patterns, and rule improvement opportunities.

Result

Teams can improve policies based on real logging behavior instead of guessing which rules matter.

Who it helps

Larger organizations with many apps, teams, governance profiles, and reporting needs.

CerbiSense analyzes governance metadata only - not raw sensitive log payloads. All recommendations require admin review before becoming active policy.

Governance MetadataPolicy GapsViolation PatternsDrift DetectionRule Improvements

Governance Metadata

CerbiSense Analysis

Recommendations

Admin Approval

CerbiShield - AWS Marketplace

Planned

CerbiShield control plane distributed natively via AWS Marketplace.

What it does

Packages CerbiShield for distribution through AWS Marketplace, giving AWS-native organizations a familiar procurement, billing, and deployment experience for the Cerbi control plane.

Result

AWS teams can deploy CerbiShield directly from their existing AWS procurement workflow without custom integration or manual licensing.

Who it helps

AWS-native organizations, cloud platform teams, and enterprise buyers managing software procurement through AWS.

AWS MarketplaceControl PlaneEnterprise DistributionPlanned

AWS Marketplace

CerbiShield Deploy

Governance Store API

App Runtime

CerbiShield - Google Cloud Marketplace

Planned

CerbiShield control plane distributed natively via Google Cloud Marketplace.

What it does

Packages CerbiShield for distribution through Google Cloud Marketplace, enabling GCP-native organizations to procure and deploy the Cerbi control plane within their existing cloud ecosystem.

Result

GCP teams can deploy CerbiShield from their existing Google Cloud procurement workflow without custom integration or manual licensing.

Who it helps

GCP-native organizations, cloud platform teams, and enterprise buyers managing software procurement through Google Cloud.

Google Cloud MarketplaceControl PlaneEnterprise DistributionPlanned

Google Cloud Marketplace

CerbiShield Deploy

Governance Store API

App Runtime

What each capability gives you

A quick reference across the full capability set.

Capability	Status	Main result	Best for
.NET Governance Stack	Available Today	Govern logs before they leave .NET apps	.NET teams and app developers
CerbiShield	Live - Azure Marketplace	Central policy, RBAC, reporting, scoring, and evidence	Platform, security, architecture
CerbiShield - AWS Marketplace	Planned	CerbiShield control plane distributed via AWS Marketplace	AWS-native organizations
CerbiShield - Google Cloud Marketplace	Planned	CerbiShield control plane distributed via Google Cloud Marketplace	GCP-native organizations
Signature Packs	Available Today	Faster starter rules and reusable event patterns	Teams starting governance
Cerbi Scanner	Available - CLI + VS Marketplace	Prioritized repo-level logging risk report	Developers, security, platform
AI Logging Governance	Pro++ opt-in	Connected AI telemetry metadata, observed systems, runtime log observations, storage posture, and redacted evidence	Platform, security, AI application teams
Cerbi AI Assistant	Building / Planned	Suggested rules, explanations, and remediation guidance	Governance admins and dev teams
Node.js Adapters	Early Alpha	Early governed logging support for Winston and Pino	Node.js teams and early adopters
Cross-Runtime Adapters	Available	Consistent governance across languages	Multi-language organizations
CerbiSense	Exploring	Metadata-driven policy improvement insights	Larger teams and enterprises

How this helps different team sizes

Solo / Founder

Start with the .NET governance stack or scanner to avoid bad logging habits early.

Result

Cleaner logs before product debt forms.

Small Team

Use starter profiles, signature packs, and observe mode.

Result

Guardrails without slowing delivery.

Growing Team

Add CerbiShield, reporting, profile versioning, and scanner-based cleanup.

Result

Standardized logging across services.

Enterprise

Use CerbiShield, RBAC, audit evidence, deployment history, scanner, and cross-runtime governance.

Result

Governed logging as an enforceable enterprise control.

Start simple. Mature when ready.

Cerbi is designed to grow with your team. Start with visibility, add guidance, and govern when ready.

01Observe

Find risky logging behavior without blocking developers.

Result

You learn where risk exists before changing team workflows.

02Guide

Turn on warnings, redaction, and suggestions.

Result

Developers get safer defaults and clearer remediation.

03Govern

Enforce trusted rules and report coverage.

Result

Security, architecture, and audit teams get evidence without manually policing every log line.

Trust boundaries

Built for enterprise trust boundaries

Govern at the source

No raw logs required for recommendations

Customer-managed deployment model

Admin-approved policy changes

Designed for existing observability stacks

Get started

Find the logging risk your dashboards cannot fix.

Start with visibility. Add guidance. Govern when ready.

Start with Cerbi View implementation guide

Governed loggingfrom source to signal.

From source to governed signal

Application Logging Source

Available today

.NET Governance Stack

CerbiShield

Cerbi Scanner

Signature Packs

AI Logging Governance

Building now

Cerbi AI Assistant

Cross-runtime - now available

Node.js Governance Adapters

Cross-Runtime Adapters

Future intelligence

Universal AI Discovery & Autonomous Agent Governance

CerbiSense

CerbiShield - AWS Marketplace

CerbiShield - Google Cloud Marketplace

What each capability gives you

How this helps different team sizes

Start simple. Mature when ready.

Built for enterprise trust boundaries

Find the logging risk your dashboards cannot fix.

Choose the boundary that fits the workload.