|PE, MachO & ELF Analysis|
|PE, MachO & ELF Analysis||✔||✔||✔||✔|
|Java, Dalvik, .NET & Flash Analysis|
|Java, Dalvik, .NET & Flash Analysis||✔||✔||✔||✔|
|Office Document Analysis|
|Office Document Analysis||✔||✔||✔||✔|
|Archive & Database Analysis|
|Archive & Database Analysis||✔||✔||✔||✔|
|Managed Code Disassemblers|
|Managed Code Disassemblers||✔||✔||✔||✔|
|Python 3 SDK|
|Python 3 SDK||✔||✔||✔||✔|
|Actions & Filters|
|Actions & Filters||✔||✔||✔||✔|
|Carbon Disassembler (x86, x64, ARM32, ARM64)||✔||✔|
|Sleigh Decompiler (x86, x64, ARM32, ARM64)||✔||✔|
|Silicon Excel Emulator|
|Silicon Excel Emulator||✔||✔|
|Windows Crash Dump Analysis|
|Windows Crash Dump Analysis||✔||✔|
|Windows Memory Analysis|
|Windows Memory Analysis||✔||✔|
|Native UI for Ghidra|
|Native UI for Ghidra||✔||✔|
|Additional Formats for Forensics|
|Additional Formats for Forensics||✔||✔|
|Microsoft Authenticode||Windows Only||Windows Only||Windows Only||All Systems|
|Access to Cerbero Store|
|Access to Cerbero Store||✔||✔||✔||✔|
|Access to Commercial Packages|
|Access to Commercial Packages||✔||✔|
Frequently Asked Questions
Cerbero Suite is a collection of deeply integrated tools aimed at low-level professionals such as reverse engineers and forensic analysts.
It contains file analysis tools, a hex editor, disassemblers, decompilers, emulators, debuggers and much more.
Cerbero Suite runs on Windows (x86, x64), macOS (x64) and Linux (x64). We also make an effort to support older systems such as Windows XP.
The list of supported files is extensive and ever growing. Therefore, the following is a partial list of supported categories of files:
Executables, Managed Executables, Microsoft Office Documents, PDF Documents, Archives, Databases, Fonts, Images, Emails, System Files, Certificates, Memory Images, XML Documents, Debug Files, Rich-Text Files.
Personal licenses can be used by hobbyists and students, they do not apply for commercial purposes. If you would like to use Cerbero Suite at work, you need to purchase a commercial license. Additionally, certain features, plugins and updates are available in advance or exclusively to commercial license holders.
The Advanced edition of Cerbero Suite has all the features of the Standard edition and includes additional features designed for experts in the security and forensic field. Among various additional file formats, it features the Carbon Interactive Disassembler with integrated Sleigh decompiler, the Silicon Excel Emulator and the native Ghidra UI.
Yes, you can download it from this page. Beware that the trial does not give you access to the additional packages released on Cerbero Store such as the native UI for Ghidra.
We have published many videos and articles to teach how to use Cerbero Suite. A good starting point is our resources page.
A license is valid for the entire major version of the current Cerbero Suite. For instance, a license bought for Cerbero Suite 6 is valid for the entire duration of the 6 series. Commercial subscription licenses have a validity of one year.
We do offer a yearly subscription licensing model for commercial licenses to companies which prefer it for budget planning.
Once a new major version is released we notify our customers and offer a 3-months renewal period. Commercial subscription licenses are renewed based on calendar years.
You can continue to use the major version of Cerbero Suite for which you purchased the license, but you lose the access to updates and Cerbero Store. Commercial subscription licenses also can no longer use the current version of Cerbero Suite.
Cerbero Engine is our solution for enterprise projects such as cloud or in-house services. It offers the same SDK as Cerbero Suite Advanced and has already been used to analyze billions of files.
Currently we offer our engine for both Windows (x86, x64) and Linux (x64). It is also compatible with older version of Windows (e.g. XP) and Linux (e.g. Ubuntu 12).
Cerbero Engine comes in two different editions: Classic and Metal. While in the Classic edition all UI functions are available, the Metal edition comes without UI dependencies. The Metal edition is designed to be run in cloud and server environments which may lack a graphical interface.
Our SDK is extensive and features support for dozens of file formats, scanning, disassembly, decompiling, emulation, signature matching, file carving, decompression, decryption and much more.
Cerbero Engine is deployed as an embeddable module: a Dynamic-Link Library (DLL) on Windows and a Shared Library on Linux. The engine can be loaded from both C/C++ and Python 3.
Cerbero Engine has been designed taking into account any type of security issue when analyzing malicious files: buffer overflows, integer overflows, infinite loops, infinite recursion, decompression bombs, denial-of-service etc.
While our SDK is in Python, our engine is written in C++ and is both multi-thread and multi-process. This design decision guarantees maximum speed, while also giving our customers the capability to write cross-platform code that is compatible across both Cerbero Engine and Cerbero Suite.
Cerbero Engine is licensed on a per-customer basis and depends upon the scope of the project. If you are interested in a quotation, please get in touch with us.
Yes, purchasing a license of Cerbero Engine comes with discounted lab licenses for Cerbero Suite! By using Cerbero Suite, engineers can interactively debug parsing issues, analyze edge cases, use our Python editor and create graphical applications that work in conjunction with the engine.
We understand the criticality of enterprise applications: Cerbero Engine customers have access to our priority support.
Cerbero Store is a a simple way to install and update optional packages for both Cerbero Suite and Cerbero Engine.
Packages contain plugins and extensions for both Cerbero Suite and Cerbero Engine.
Once you have activated your license of Cerbero Suite, you can access Cerbero Store from the 'Extensions' page by clicking on 'Store'. From there you can install and update packages.
Yes, all packages on Cerbero Store are signed.
Yes, the process of how to create packages is fully documented on our SDK page.
We support various payments methods including PayPal and credit card (Stripe). For the purchase of commercial licenses we also offer bank wire transfer (contact us).
We do not currently accept Bitcoin.
When a purchase is made using our online store, the license is sent via email. In order to prevent fraud, each purchase must be manually approved by our company. This process shouldn’t normally take longer than a working day. If by then you haven’t received your license information, please contact us.