Cernexa docs & help

Endpoint security for the agentic era — discover, score, and govern everything your endpoints install.

Sign up, create your first organization, and land in a ready-to-use console.

Run the one-line installer to enroll a device, report its install surface, and start scoring.

Your fleet's install surface and risk posture at a glance — KPIs, trends, and what needs attention.

Block risky software before it reaches a machine — agentless checks for CI, an inline registry proxy, and a guard command.

Add your own VirusTotal API key to enrich Crucible verdicts with file and domain reputation.

Create per-organization API keys for the Supply Chain Gateway and other programmatic access.

The full inventory of installed software, and how Crucible turns each artifact into an explainable 0–100 risk score.

Fleet-wide vulnerability posture — which installed software carries known CVEs, what's actively exploited, and how many endpoints are affected.

Auto-approve, block, or flag installs by risk level, software type, or publisher.

Persistent allow/block decisions, your default posture, and automatic protections that follow software across versions and endpoints.

Declare the capability budget each piece of non-binary software is allowed — network, filesystem, shell, secrets — and catch anything beyond it.

Manage the devices running the Cernexa agent — their state, enforcement mode, discovered software, and lifecycle.

Maintain a vetted list of internally-approved software your teams can install safely.

Manage your organization profile, invite teammates, and understand owner / admin / member roles.

How Cernexa protects your password and signs you out after inactivity.

A tamper-evident record of who did what in your organization.