CerbiShield / Ongoing logging control
After discovery, keep logging controls consistent across connected application teams. Manage versioned policy, targets, rollout, exceptions, and recorded outcomes in your Azure tenant. CerbiShield is the paid operating layer for this ongoing work.
Inside CerbiShield / From observation to action
A clear view of application risk, recorded policy outcomes and retained evidence. Built to help teams ask better questions of their logging controls.
01 / Command Center
Bring recorded outcomes, application risk and policy relationships into one review. Give the next investigation a clear starting point.
Review the selected scope and reporting window, then follow a finding into its application context.
02 / Violations Explorer
Move from severity patterns to the application, rule and field behind a finding. Give engineering teams specific evidence to investigate.
Severity, application breakdowns and rule context help narrow the review. Counts retain their own labeled scope and time window.
03 / Reporting
Compare current and prior posture, then explore where blocked, redacted and error outcomes overlap. Turn a broad governance question into a focused review.
Overlap counts application/environment pairs, not event totals. Unknown observations remain unknown; the chart does not imply causality.
04 / Evidence Center
Connect governance summaries with retained evidence. Review what is available, its scope, and the source limitations that matter to the decision.
This demo shows a partial Reporting projection. Package inventory and retention sources are unavailable; those states remain visible in the capture.
Turn reviewed logging risks into versioned governance profiles and validate representative fields.
Apply policy at selected application or OTLP log boundaries and review rollout state.
Review findings, terminal outcomes, and traceable relax decisions where supported.
Review policy, application, and time-window context where recorded, plus configuration history.
Governed Applications
Use existing Microsoft Entra workload principals with stable tenant-scoped application identities, viewer/editor assignments, token validation, and active installation entitlement.
Revoke an assignment or disable an application. Authorization fails closed and changes remain auditable.
Explore Governed ApplicationsCreate a stable, tenant-scoped governed application.
Associate existing Entra workload principals; assign viewer or editor access.
Validate the workload token and active installation entitlement for governed access.
Read back governance profiles and review the recorded lifecycle.
Revoke an assignment or disable the application; authorization fails closed.
Retain the authorization lifecycle, including changes and denials.
AI logging / Pro++ option
Review supported provider, model, agent, and tool metadata on connected logging paths. Inspect classifications, token metadata, estimated cost, and policy evidence where supplied. This does not authorize agent actions or control model behavior.
Metadata first. Raw prompts and responses are not collected by default. Separate from the Cerbi AI assistant.
Explore scope and capabilitiesIllustrative AI preview. Example values are not tenant observations; this preview does not collect tenant AI telemetry.
Available through Microsoft Marketplace. CerbiShield deploys as an Azure Managed Application into the customer tenant, with managed identities and server-side tenant isolation.
Technical architectureUse application-local governance or an explicitly configured Gateway for selected OTLP log paths. Keep downstream observability, SIEM, and APM tools in place. Your team owns Azure operation, integrations, access, policy configuration, and review of coverage and failures. A path you have not connected is not governed.
A founder-led logging-risk review
Bring a Scanner finding, a sensitive-field concern, or an evidence requirement. Compare existing controls first. If a gap remains, agree one workload, one policy, an evaluation window, and evidence to review before deciding on a recurring CerbiShield deployment.