Cerbos | Developers

Getting Started

Product

How It Works

NEW

Cerbos Cloud

Docs & Resources

Stars1000

Free workshop to help you design Cerbos policies for your requirementsBook a session

Easy setup of policy testing and distribution with Cerbos CloudSign up to our beta

Implement

authorization

once and for all

Replace complicated authorization logic with a single call and allow product owners or security teams to manage access without touching code.

Configuration - not code

Define permissions as config outside of your application logic meaning no more code changes when requirements change

Scalable

Cerbos is containerized, stateless and has a very low resource footprint: allowing it to be scaled horizontally to handle any kind of demanding workload.

Developer Tooling

Ensure policies are production ready using first class support for GitOps including a built-in testing framework and CI/CD integration.

if (await cerbos.isAllowed({ principal: user, resource, action: "edit" })) {
  // allowed
}

if (user.email.includes("@mycompany.com") ||
  (user.company.package === "premium" && user.groups.includes("managers"))
) {
  if(user.region === resource.region) {
    // access allowed
    AuditLog.record("ALLOWED", "edit", user, resource);
  } else {
    // access denied
    AuditLog.record("DENIED", "edit", user, resource);
  }
} else {
  // access denied
  AuditLog.record("DENIED", "edit", user, resource);
}

Before

After