Skip to content
CERNIS PRO Logo CERNIS PRO
DE

Changelog

What defines CERNIS PRO — set down traceably, honestly and version by version. It starts with the first public release, 2.1.2; every further edition is added here as its own block.

v2.1.2

Current version

The complete rebuild

CERNIS PRO is a network observer rebuilt from the ground up — this time following modern, professional software-development principles from the outset. Version 2.1.2 is the first public release of this new edition; the versions before it were never public.

Architecture decisions (ADRs)
46
Enforced architecture rules
8 contracts
Report types
6
Licence
GPL-2.0-only

Foundation & architecture

  • Complete rebuild on a clean, clearly layered (hexagonal) architecture.
  • 8 automatically enforced architecture rules (contracts), checked hard in CI on every build.
  • Strict static type checking throughout (mypy strict); the complete test suite is a build gate.
  • 46 documented architecture decisions (ADRs in Nygard format).
  • Documented security review, carried out by the project itself — findings fixed or deferred in a traceable way.

Observe

  • Network scan with live progress: devices, open ports, services and operating-system detection.
  • Star-shaped topology graph with measured (LLDP/CDP) and sensibly assumed connections.
  • Passive SNI capture: requested host names per program — the live data stays transient; storage is permanent only when the recording of external contacts is switched on.
  • Live monitoring and long-term recording with threshold alarms.
  • FRITZ!Box detail view via the official TR-064 interface.
  • On Windows, reading real domain names, packet capture and the detection of network neighbours (LLDP/CDP) are available.

Investigate & security

  • Remote-peer resolution with facts and their sources (name, network operator, country, certificate).
  • Continuous cross-check of known devices against a public vulnerability database (CVE).
  • Network-wide DNS guardian with a trust model.
  • Opt-in default-credentials check with strict safeguards.

Reporting & export

  • Six report types as PDF, including the “network health” score (0–100).
  • Export of scan results and analysis findings as CSV, JSON or PDF.

Operation & language

  • Bilingual interface (German/English) including the built-in manual, switchable instantly.
  • Light and dark appearance, any time via a toggle.
  • Adjustable analysis rules and custom importable port lists.

Platforms

  • Linux x86-64 and ARM64: as .deb and .rpm.
  • One rpm package for all RPM distributions; the range of supported Linux systems has been widened.
  • Windows x64 and ARM64.
  • macOS on Apple Silicon.
  • Every package brings its licence information along; a checksum accompanies every package.
  • Licence declaration GPL-2.0-only; the licence information of the bundled components is collected afresh with every build.

Outlook

Among the features under consideration for a future release:

  • Support for local AI models
  • Recurring scans with evaluation over time
  • Detailed router readout via the TR-064 standard, across manufacturers
  • Installation and operation without a graphical interface, for servers and devices without a screen

None of this is a commitment. What has been promised can be found under the known limitations on the downloads page.

To the known limitations