Security Architecture
Rivet is built for security teams. That means your data stays yours.
All Analysis Runs Locally
Rivet processes your binaries, certificates, and source code entirely on your machine. No files are uploaded to Cerebion servers. Ever. If you turn on AI fix suggestions, code snippets go only to the AI provider you choose; with a local model such as Ollama, nothing leaves your network.
Air-Gap / Offline Support
Rivet supports fully offline operation with Ed25519-signed offline license files. No internet connection required for air-gapped environments.
License Validation
License validation uses a 7-day offline cache. If the license server is unreachable, Rivet continues to operate normally for up to 7 days.
Git-Based Patch Application
AI-generated fixes are applied as Git patches with full rollback support. Every change is atomic and reversible.
No Telemetry
Rivet does not collect usage telemetry, crash reports, or scan results. Your scan results stay on your machine.
Security Assurance Document
Full security architecture, data handling tables, compliance posture, and enterprise deployment guidance for security teams evaluating Cerebion Rivet.