This Privacy Policy covers the Cerberus website and the free, self-hosted Cerberus software. The software runs on infrastructure you control; CTF Designs does not operate your installation or receive its local scan history by default.
We do not sell, rent, or trade personal information or scan results. CTF Designs does not receive local scan results from the standard self-hosted app.
Your installation contacts target websites, DNS services, and security-tool update sources needed for scans. Lighthouse runs locally. If you configure AI analysis, findings are sent to the model provider you select under that provider's terms. GitHub or a container registry processes downloads. The website hosting provider and linked Buy Me a Coffee service have their own privacy policies. We may disclose information if required by law.
You control local retention by deleting scan records, the SQLite database, or the Docker volume. We keep website and support records only as long as reasonably necessary for security, support, and legal obligations.
The self-hosted app does not set advertising or analytics cookies. The website may use necessary hosting features and the accessibility widget. External links are governed by the destination's policy.
The in-app test manual is shipped with Cerberus and searched locally in your browser. Manual search terms are not sent to CTF Designs. The manual contains general descriptions of automated checks and results, not personalized advice or remediation.
The stack defaults to a localhost bind, local owner authentication, disabled active scans, non-root services, dropped Linux capabilities, and read-only filesystems. Provider keys are encrypted using a separate installation key. You are responsible for protecting local credentials, that key, Docker host, backups, reverse proxy, and network exposure. The optional Unraid AIO launcher requires Docker-socket access. No security control is perfect.
Depending on where you live and which laws apply, you may have rights to access, correct, or delete personal information we hold about you, or to opt out of certain processing. To exercise an applicable right, contact us below. We will not discriminate against you for making a valid privacy request.
The Service is intended for businesses and website owners and is not directed to children under 13. We do not knowingly collect information from children.
We may update this Policy from time to time. The "Effective Date" above reflects the latest version.
Questions or requests about your privacy? Email roman@ctfdesigns.com or call (951) 425-4567. Cerberus is a product of CTF Designs, Murrieta, CA.