Workflow / Runbooks
Runbooks Into Live Sessions
Reusable command cards push directly into the active shell or pane instead of living in disconnected notes.
Cerebra
A workplace that SEES what you want, Runbooks, AI, Graphs, Notes, and Analysis tools, plus AI-Cyber Mode where AI can SEE and CONTROL everything : RDP/SSH/Browser/Tools/..
Split screen like a tmux master, save and reuse your dream templates
become super efficent, find what you need, and execute with one click
Everything you need in one place
Switch to magic AI-Cyber mode, AI can SEE and Control everything (RDP, Browser, SSH, Inteligence Tools, Pentesting, Graph building..)
Comparison
Core product differences at a glance.
| Feature Feat | Cerebra CER | iTerm2 IT2 | Warp WRP | Termius TER | MobaXterm MOBA | SecureCRT SCR | Royal TS/X RTS | Tabby TAB |
|---|---|---|---|---|---|---|---|---|
| SSH SSH | ✓ ✓ | via CLI CLI | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ |
| RDP RDP | ✓ ✓ | — — | — — | — — | ✓ ✓ | — — | ✓ ✓ | — — |
| VNC VNC | ✓ ✓ | — — | — — | — — | ✓ ✓ | — — | ✓ ✓ | — — |
| Browser (Web Access) Browser | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Local Shell Local Shell | ✓ ✓ | ✓ ✓ | ✓ ✓ | — — | ✓ ✓ | — — | — — | ✓ ✓ |
| Split Panes (tmux-style) Split Panes | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ |
| Pane Templates (SOC Mode) Pane Templates | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Host Inventory & Groups Host Groups | ✓ ✓ | — — | — — | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ | ✓ ✓ |
| Runbooks (CyberSec Commands 1-Click) Runbooks | ✓ ✓ | — — | Basic Bas | Snippets Snip | Macros Mac | Macros Mac | Tasks Task | — — |
| 1-Click Runbook Execution (SSH/RDP/VNC/Browser) 1-Click Exec | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Reverse Engineering Helper RevEng | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Cracking / Encoding Toolkit Crack / Encode | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| OSINT Toolkits OSINT | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Smart Graphing (Integrated CVEFlow) Graphing | ✓ ✓ | — — | — — | — — | — — | — — | — — | — — |
| Notes (Cherry Notes Integrated) Notes | ✓ ✓ | — — | — — | — — | — — | — — | Per-conn Note | — — |
| AI Mode (Claude Cybersecurity Control) AI Mode | ✓ ✓ | — — | Generic Gen | Basic Bas | — — | — — | — — | — — |
| Secure Credential Storage (Encrypted) Cred Storage | ✓ ✓ | — — | — — | ✓ ✓ | — — | ✓ ✓ | ✓ ✓ | — — |
Workflow + Analysis
Cerebra keeps execution, evidence, enrichment, and offline analysis in one workspace, so the workflow does not break every time the task changes.
Workflow / Runbooks
Reusable command cards push directly into the active shell or pane instead of living in disconnected notes.
Workflow / AI Toolkit
The AI Toolkit can reason over the current workspace instead of acting like a generic detached chatbot.
Workflow / CyberViewer
Attack-flow graphs stay connected to runbooks and previews so the app captures both action and structure.
Workflow / Notes
Evidence, screenshots, code blocks, and operator notes stay in the same app instead of fragmenting across tools.
Analysis / Intel
Enrich domains, URLs, IPs, and hashes from the same operator surface instead of pivoting into a pile of browser tabs.
Analysis / RevEng
Map suspicious APIs to ATT&CK, triage binaries, deobfuscate content, and extract IoCs in the same workspace that holds the live session.
Analysis / Crypto
Decode JWTs, hash payloads, convert formats, and run utility transforms without copying data into random web tools.
Protocols
Remote access and local shell work stay in one operator workspace instead of fragmenting across separate tools.
Protocol
Real PTY-backed terminal sessions with persistent tabs and split panes.
Protocol
Docker-backed preferred mode with native fallback when needed.
Protocol
Integrated noVNC workflow inside the same workspace shell.
Protocol
Quick local sessions for drafting, testing, and operator utility work.
Download
Pick the build for your platform. Downloads are public, and every build still shows its status and SHA-256 checksum.
macOS
Primary macOS release
Apple notarized
cddbd13a5e83c43180742f6df3a01fb8a66bd86617db7e5eee5589b0a2f2bc51 Windows Installer
Recommended Windows preview install path
Unsigned preview build; SmartScreen warning expected
50776a6f394a5a08a73ad47f571573954c4acaa80bb50cf30c6d27b0ce642d7c Windows Portable
Portable Windows preview build
Unsigned preview build; reputation is not established
ee3feb11d3c160ef0f1658d8a1d96ee3ed5f9f3b6b92b1ab0fe753cac0799208 Windows Installer
Windows on ARM preview build
Unsigned preview build; SmartScreen warning expected
d517c7249931744117f0e36905769c0b2944a3fa893b44dff1ff651b0fcb6b5e Windows Portable
Portable Windows on ARM preview build
Unsigned preview build; reputation is not established
73b66b70d9827b8c7b34ff9078e8084c6a66cf3e17f343f439d0f56a0a90d72e Linux AppImage
x64 AppImage public channel
Experimental until distro matrix is complete
f3faa262e6892116021247a9c138652ef573e6b84c61d55d46959c598aeb5d3a Linux AppImage
ARM64 AppImage (Raspberry Pi, AWS Graviton)
Experimental until distro matrix is complete
bf5de43806ff0c2669ad051576101f289dc91a1f33fb680218a1d738d7d7460f