> ## Documentation Index
> Fetch the complete documentation index at: https://docs-cerberus.c7-security.com/llms.txt
> Use this file to discover all available pages before exploring further.

# C7 Cerberus

> An offensive security platform that makes security assessments 10x faster. From reconnaissance to reporting in a single ecosystem.

<img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/dashboard-hero.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=193f7e1e1776e21ea3b44ba7f442cb63" width="2992" height="1696" data-path="assets/cerberus/dashboard-hero.png" />

Cerberus is an offensive security platform for security professionals of all levels - from penetration testers and ethical hackers to enterprise security teams and organizations without dedicated security staff. It combines a custom programming language, a visual workspace, and AI automation into a single ecosystem that can make penetration testing 10x, 20x, or even 100x faster and more effective. Users can handle everything from reconnaissance to reporting without requiring deep technical expertise.

## Core Components

### Cerberus Language

A statically-typed programming language purpose-built for pentesting. Unlike general-purpose scripting, Cerberus uses an effects system that enforces scope boundaries at compile time. Code that tries to operate outside the defined assessment scope won't execute - this isn't just a warning, the code literally won't run.

<img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/lang.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=3d12dfdb4bbe89554ce93a937714e55c" width="1920" height="1080" data-path="assets/cerberus/lang.png" />

### IDE for Ethical Hackers

A visual environment for attack planning and execution. Your target environment is displayed as an interactive graph where domains, IPs, services, and personnel appear as connected nodes. Instead of mentally piecing together how systems relate, you see it visually and explore the attack surface directly.

<img src="https://mintcdn.com/c7cybersecurity/5CsQlyE86vUql6cP/assets/cerberus/ide-working.png?fit=max&auto=format&n=5CsQlyE86vUql6cP&q=85&s=971d1be295f322940bc2f48955c6610b" width="1882" height="879" data-path="assets/cerberus/ide-working.png" />

<CardGroup cols={3}>
  <Card title="Asset Mapping" icon="diagram-project">
    Network relationship graphs
  </Card>

  <Card title="Interactive Graph" icon="share-nodes">
    Explore attack surface visually
  </Card>

  <Card title="Team Collaboration" icon="users">
    Real-time collaboration
  </Card>
</CardGroup>

### AI-Driven Automation (AutoPT)

An AI system that writes and executes Cerberus code based on natural language prompts. Describe what you want - something like "test all subdomains for SQL injection" - and it generates the code, runs the tests, observes results, adapts to defenses, and produces proof-of-concept evidence. It can run for hours or days without manual intervention.

<img src="https://mintcdn.com/c7cybersecurity/5CsQlyE86vUql6cP/assets/cerberus/ide-prompt.png?fit=max&auto=format&n=5CsQlyE86vUql6cP&q=85&s=b63f5eebce35f5006d377f9ccc5a4e49" width="1873" height="861" data-path="assets/cerberus/ide-prompt.png" />

## Platform Capabilities

<CardGroup cols={3}>
  <Card title="Automated Pentesting" icon="robot">
    AI-driven tests that run continuously, adapting to defenses
  </Card>

  <Card title="Vulnerability Management" icon="list-check">
    Track findings with severity scoring, remediation status, and attack vector mapping
  </Card>

  <Card title="Asset Discovery" icon="radar">
    Map infrastructure including domains, IPs, services, tech stacks, and personnel
  </Card>

  <Card title="Defended Attacks" icon="shield">
    Record when attacks get blocked - useful for understanding what protections are working
  </Card>

  <Card title="SAST/DAST" icon="code">
    Static and dynamic application security testing
  </Card>

  <Card title="EASM" icon="globe">
    External attack surface management
  </Card>

  <Card title="Reporting" icon="file-lines">
    Generate assessment reports with findings and remediation recommendations
  </Card>
</CardGroup>

## How Teams Use It

A typical engagement follows this flow:

<Steps>
  <Step title="Define Scope">
    Add target domains, IPs, and services to the platform
  </Step>

  <Step title="Reconnaissance">
    Map out subdomains, open ports, running services, tech stacks, and protection mechanisms
  </Step>

  <Step title="Testing">
    Write Cerberus code manually, use AI to generate tests, or combine both approaches
  </Step>

  <Step title="Track Findings">
    Vulnerabilities flow into the tracker where they're scored, categorized, and linked to affected assets
  </Step>

  <Step title="Report">
    Pull everything together - findings, severity ratings, remediation recommendations, and scope documentation
  </Step>
</Steps>

## The Workspace

The platform is organized around these sections:

<Accordion title="Dashboard" icon="gauge" defaultOpen>
  High-level view of engagement status

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/dashboard2.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=59d5a23e1f641f22816e1b33bdefdaee" width="1920" height="1080" data-path="assets/cerberus/dashboard2.png" />
</Accordion>

<Accordion title="Scope & Recon" icon="radar">
  Manage targets and explore the asset map

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/scope-recon.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=e3dd03952aa23b99efd510f54f6ccea0" width="2994" height="1698" data-path="assets/cerberus/scope-recon.png" />
</Accordion>

<Accordion title="Vulnerabilities" icon="bug">
  All findings with filtering and search

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/vulnerabilities-dashboard.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=bb90fd6bf8d500cac8d251f83abfb436" width="2988" height="1718" data-path="assets/cerberus/vulnerabilities-dashboard.png" />
</Accordion>

<Accordion title="Defended Attacks" icon="shield">
  What got blocked and by what protection

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/defended.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=81a5953ef36d841a228178c8149d22f8" width="1920" height="1080" data-path="assets/cerberus/defended.png" />
</Accordion>

<Accordion title="Agents" icon="robot">
  Schedule automated tests on a recurring basis

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/cve-monitoring-agent.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=ca0978358bb829ccaaefabf888e678cd" width="2016" height="1664" data-path="assets/cerberus/cve-monitoring-agent.png" />
</Accordion>

<Accordion title="Reporting" icon="file-lines">
  Document generation

  <img src="https://mintcdn.com/c7cybersecurity/HiaZBSQlk-siyrlN/assets/cerberus/report-generation-1.png?fit=max&auto=format&n=HiaZBSQlk-siyrlN&q=85&s=d06fef60e67508bbd15889369f5eb157" width="1496" height="1276" data-path="assets/cerberus/report-generation-1.png" />
</Accordion>

Everything stays connected - click a vulnerability to see which asset it affects, click an asset to see its relationships, click a defended attack to understand what protection stopped it.
