Welcome to Cerbera AI
Cerbera AI gives security teams visibility and control over how AI is used inside the organization. A lightweight local proxy inspects traffic to AI tools wherever it originates: a browser tab on ChatGPT, a desktop app like Claude, a coding agent like Claude Code, or an MCP server running locally.
Because it sits in the request path, Cerbera AI covers the entire AI attack surface on a device from a single deployment, and it is privacy by design: by default only metrics leave the device, never prompts or responses.
Key Capabilities
AI Discovery
Inventory every AI tool, model, agent, and MCP server in use across your fleet, then decide what to allow or block.
Rules
A firewall-style catalog with four actions: allow, monitor, redact secrets, or block, scoped by AI provider, user group, and behavior.
Agent Controls
Flag risky agent behavior such as commands that open a remote shell or access to credential files, and detect personal account usage on Claude and ChatGPT.
MCP Governance
Discover and risk-score the MCP servers your employees connect to, and allow or block them with rules.
Privacy by Design
Metrics only by default. Logging a prompt body requires an organization-wide setting and a per-rule setting to both be on, and reading it requires a time-boxed, audited request.
Openness & Interoperability
Export alerts over OpenTelemetry, drive configuration from the API, and react to events with webhooks (roadmap).
Why Choose Cerbera AI?
- Full attack surface: One proxy covers browser LLMs, desktop apps, local coding agents, and MCP, not just one channel.
- Purpose-built for AI: Unlike an EDR (system calls) or a firewall (network), Cerbera AI sees prompts, redacts secrets, and governs AI-specific behavior.
- Privacy by design: The default posture collects only metrics. Seeing a prompt is a deliberate, auditable exception, not the norm.
- Managed model: Cerbera maintains the detection catalog and proposes rules as new tools appear, so your team carries minimal load.
- Invisible in use: Signature-based rule evaluation adds negligible latency, so the proxy is transparent to users.
