Cerberus is free, self-hosted website security and quality-scanning software from CTF Designs. These Terms govern cerberusscan.com and your use of the software. The AGPL-3.0 license separately grants your rights to copy, modify, and distribute the software.
Cerberus performs passive checks of public website responses, DNS and exposure signals, security configuration, and local Lighthouse performance checks. Operators may explicitly enable Nuclei, OWASP ZAP, and sqlmap tools for authorized active testing. Findings are automated observations at a single point in time and may be incomplete or inaccurate.
You may only scan a website that you own or that you are explicitly authorized to test. Scanning systems without authorization may violate law, including the U.S. Computer Fraud and Abuse Act (18 U.S.C. § 1030) and California Penal Code § 502.
By submitting a URL, you represent and warrant that you are the owner of that website or have obtained the owner's explicit permission to have it scanned.
You are solely responsible for ensuring you have the legal right to authorize every scan, for configuring your installation, and for all activity performed through it.
Cerberus may explain what an automated check observes, why the signal may matter, and how to interpret a result. Those descriptions do not prescribe remediation, recommend a product or course of action, or promise that any response will correct an issue. You are responsible for independently validating findings and deciding whether and how to act.
Installing or using Cerberus does not create a client, fiduciary, professional-services, support, maintenance, remediation, or service-level relationship with CTF Designs.
You agree not to scan systems without authorization, use Cerberus unlawfully, overload targets, evade access controls, or expose your installation in a way that allows unauthorized use. You are responsible for complying with laws and third-party terms.
The Cerberus source code is licensed under the GNU Affero General Public License, version 3.0. The full license controls if this summary conflicts with it. Cerberus and CTF Designs names, logos, and branding are not licensed for misleading endorsement or impersonation. Your locally generated reports are yours to use.
Cerberus depends on Docker, open-source scanner tools, Python and Node packages, target websites, DNS, GitHub, and container registries. Optional AI analysis contacts the provider selected by the operator. Those services can change or fail and their own terms apply.
The website, software, reports, and documentation are provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, accuracy, security, or availability, to the fullest extent permitted by law.
To the fullest extent permitted by law, CTF Designs and Cerberus are not liable for indirect, incidental, special, consequential, exemplary, or punitive damages; loss of data, revenue, or goodwill; target disruption; unauthorized scans; missed or inaccurate findings; security incidents; or third-party failures. Our total liability relating to Cerberus will not exceed the amount, if any, you paid directly for Cerberus in the 12 months before the claim.
You agree to indemnify and hold harmless CTF Designs and Cerberus from any claims, damages, or costs arising out of your use of the Service, including any scan you request or authorize without proper authority, or any violation of law or of these Terms.
We may update these Terms from time to time. Continued use of the Service after changes are posted constitutes acceptance of the updated Terms.
These Terms are governed by the laws of the State of California, and any disputes will be handled in Riverside County, California.
Questions about these Terms? Email roman@ctfdesigns.com or call (951) 425-4567. Cerberus is a product of CTF Designs, Murrieta, CA.