How Cerbi scores violations

Governance measured,not assumed.

Governed outcomes from connected workloads provide the evidence for reporting and scoring in CerbiShield. Review posture alongside the active policy, workload context, and available observations.

Governance scores are indicators of policy adherence. They are not a guarantee of compliance or audit outcomes.

What it tracks

More than pass/fail. A view of governance over time.

Cerbi's scoring mechanism gives teams something audit-readiness requires: a measurable, time-series record of governance posture - built from real enforcement data, not self-reported.

Governance health score

Aggregate score (0–100) reflecting how closely log events follow the active governance profile for a given service and environment.

Violation trends over time

Week-over-week and month-over-month violation counts. Identify services trending in the wrong direction before they become incidents.

Relaxation and bypass history

Every time a governance rule was relaxed or bypassed, CerbiScoring records the actor, timestamp, and rule affected.

Time-series posture view

Track governance improvement across teams and services. Gives security and engineering leadership a measurable baseline.

Per-service and per-environment breakdown

Filter scoring views by service, environment, or governance profile. Isolate where governance debt is concentrated.

Compliance evidence support

Scoring records are retained and queryable. Useful for supporting audit evidence, not a guarantee of compliance outcomes.

Score interpretation

What the score bands mean.

Bands are a guidance heuristic and may be tuned per governance profile. Not a compliance certification.

90–100

Excellent

Strong governance posture. Minimal violations.

70–89

Good

Small gaps. Review open violations.

50–69

Fair

Notable gaps. Investigate and remediate.

0–49

Poor

High risk. Prioritize remediation.

Traceability

Governance metadata attached to every event.

Every log event processed by CerbiStream carries governance metadata. That metadata is what Cerbi uses to compute posture scores and violation trends, which surface in CerbiShield. It is also available in your downstream observability platform for query.

Metadata is always present - even when no violations were found. This ensures complete traceability across all log events, not just the ones that failed policy.

Governance metadata - always present
Governance profile identifier
Enforcement state (evaluated / disabled / bypassed)
Enforcement mode (strict / warn-only / relaxed)
Findings list for this event
Relaxed flag

When scoring is enabled

Score value (0–100)
Scoring version identifier

Security and Compliance

Quantified evidence of logging policy adherence across connected services. Violation records and relaxation history for audit support.

Engineering Leadership

A single posture score per service and environment. Track governance debt reduction over time. Make investment decisions with data.

Scoring is visible through CerbiShield

CerbiScoring data is surfaced in the CerbiShield dashboard. Manage profiles, view violations, and track posture trends from the same control plane.

See CerbiShield

Put a score on your governance posture.

CerbiScoring gives engineering and security teams a measurable, trackable view of logging governance health.

NEXTChoose your next proof

Review a Scanner finding or logging requirement against your existing controls. If a recurring gap remains, scope one CerbiShield workload, policy, evaluation window, and evidence review.

One initial workload/Customer-hosted in Azure/Existing destinations remain
Governance Scoring | Cerbi