Workflow / Runbooks
Runbooks Into Live Sessions
Reusable command cards push directly into the active shell or pane instead of living in disconnected notes.
Cerebra
A workplace that SEES what you want, Runbooks, AI, Graphs, Notes, and Analysis tools, plus AI-Cyber Mode where AI can SEE and CONTROL everything : RDP/SSH/Browser/Tools/..
Split screen like a tmux master, save and reuse your dream templates
become super efficent, find what you need, and execute with one click
Everything you need in one place
Switch to magic AI-Cyber mode, AI can SEE and Control everything (RDP, Browser, SSH, Inteligence Tools, Pentesting, Graph building..)
Workflow + Analysis
Cerebra keeps execution, evidence, enrichment, and offline analysis in one workspace, so the workflow does not break every time the task changes.
Workflow / Runbooks
Reusable command cards push directly into the active shell or pane instead of living in disconnected notes.
Workflow / AI Toolkit
The AI Toolkit can reason over the current workspace instead of acting like a generic detached chatbot.
Workflow / CyberViewer
Attack-flow graphs stay connected to runbooks and previews so the app captures both action and structure.
Workflow / Notes
Evidence, screenshots, code blocks, and operator notes stay in the same app instead of fragmenting across tools.
Analysis / Intel
Enrich domains, URLs, IPs, and hashes from the same operator surface instead of pivoting into a pile of browser tabs.
Analysis / RevEng
Map suspicious APIs to ATT&CK, triage binaries, deobfuscate content, and extract IoCs in the same workspace that holds the live session.
Analysis / Crypto
Decode JWTs, hash payloads, convert formats, and run utility transforms without copying data into random web tools.
Protocols
Remote access and local shell work stay in one operator workspace instead of fragmenting across separate tools.
Protocol
Real PTY-backed terminal sessions with persistent tabs and split panes.
Protocol
Docker-backed preferred mode with native fallback when needed.
Protocol
Integrated noVNC workflow inside the same workspace shell.
Protocol
Quick local sessions for drafting, testing, and operator utility work.
Download
Pick the build for your platform. SHA-256 checksums are shown for each download.
macOS
Primary macOS release
Apple notarized
06078ae8dc6e154920a23febfb2cdbd495d3e3a3145ce08123638020682afe4a Windows Installer
Recommended Windows install path
Official Windows installer build
84e005f2fd0ea48088b40a9d415edaca2701ce7d91f096b401ff545de2a4a24b Windows Portable
Portable build for direct launch
Official Windows portable build
0f368a8b6c02366434d43f9c22ed475103b8240b4631ab2cc0ddff5fd9107643 Windows Installer
For Windows on ARM (Snapdragon, Surface Pro X)
Official Windows ARM64 installer build
5106daf6ea4c590570a11c9cfd87a271e4fd75df03f5fd496248f723c2ac29ad Windows Portable
Portable build for Windows on ARM
Official Windows ARM64 portable build
3f91d9a7d914f1634ae185bf5ffd3f77f152243be3df6a7e4424c1e5a08495f6 Linux AppImage
x64 AppImage public channel
Experimental until distro matrix is complete
dc286d265787b26844e77877d08bf44463059f3394c80f8b3148c9d42a9b1812 Linux AppImage
ARM64 AppImage (Raspberry Pi, AWS Graviton)
Experimental until distro matrix is complete
d892a4f34ccf529e13c0fdcde834d5dcc4ffbbbb16d85f6b9443d3d43da64a5f