Secure your architecture with externalized authorization
Architect robust and scalable externalized authorization with Cerbos' Policy Decision Point and managed Policy Administration Point, meeting your Zero Trust objectives.
Join hundreds of leading companies using Cerbos
Externalized authorization for your enterprise applications
Policy based access control
Ensure dynamic and flexible access control with policy-driven decisions. Adapt to changing access needs with ease, define access based on multiple conditions and contexts, and manage policies within your existing governance processes.
Decision level audit logs
Achieve transparency, accountability, and compliance with Cerbos' comprehensive audit logging. Feed application decision logs into your existing SIEM tooling for end-to-end visibility. Audit logs in Cerbos Hub capture authorization decisions across all PDP instances in a central, collated feed.
Distributed decisioning, centrally managed
Use Cerbos Hub's unified platform to enable collaborative authoring, iteration, and management of authorization policies by developers and product teams. Maintain consistent, transparent, and adaptable authorization logic across all applications.
Cerbos Hub provides a comprehensive suite of tools that:
- Integrate seamlessly with your existing tech stack
- Ensure you're able to demonstrate compliance with HIPAA, GDPR, SOC2, and others
- And streamline the authorization process across multiple platforms
The Impact of Cerbos
David, Senior Software Engineer
@ Salesroom
"We can run Cerbos next to our application, and can have as many instances running as we need to. So we can have one dedicated host we're running it on. And so there's much less risk of it going down and taking everything down without us knowing about it all, without being completely out of our control, like the host solution might be."
Rob, Principal Engineer
@ Utility Warehouse
"One of our favorite features is the audit logs because it allows us to understand what is happening in the black box. We’ve never had that before and we didn’t know we needed it."
Steve, Staff Engineer
@ NTWRK
"Throwing the entire concern of authorization across to Cerbos really did increase my velocity, which in turn increases velocity downstream from me. It has allowed the team to deliver top-tier user experience and concentrate on faster app iterations."
Chuck, Head of Engineering
@ Salesroom
"I categorized Cerbos as just one of those things I probably don't have to think about. And that's a very valuable thing to me cause there's a lot of things that take up even a small percentage of our mind space. And if we can just leave it be in the corner and know that we'll be protected. And if something goes wrong, they will do everything in their power to resolve. It gives you that extra bit of confidence."
Henry, CTO & Co-Founder
@ Nook
"Having the separation of the permissions from the code base just makes the code base more elegant. It makes the permissioning more elegant. It means they're centralized, so they're not tied to specific endpoints. And ultimately it means that different business owners, i.e. Joe, in our case, because he's the only one who's not a developer, have the ability to actually make updates."
Why Cerbos?
Flexible deployment models
Self-hosted, compatible with air-gapped, high security environments. Deploy with serverless functions or a sidecar model.
Built for scale
Cerbos is containerized, stateless, and scales horizontally to handle increasing demands.
Centralized management
Use Cerbos Hub for policy management, collaboration, and streamlined deployment.
Supported authentication providers
Use any identity provider to authenticate your users. Use Cerbos to enforce access controls. Cerbos natively supports JWT for integration with numerous authentication providers, such as: JWT, Auth0, Okta, and others.
Fine-grained access control
Achieve precise control over resource access via RBAC and ABAC policy.
No lock-in
Maintain full ownership of where policies are stored, and deploy onto any platform.
Thriving community
Join an active community of Cerbos users and connect directly with our engineers.
Speak to our solutions team, we'll be happy to assist you in designing a truly zero trust application archicture with externalized authorization.
What our users say about Cerbos
Rob, Principal Engineer
@ Utility Warehouse
"It's weird to say an outside company has our back, but Cerbos does. It's the people. It's their open-source code: it's high quality, you can read it, it does what it says on the tin"
Joe, Software Engineer
@ 9fin
"It's a good feeling being able to say yes to almost any permissioning requirement." "Cerbos is small, contained and easy to implement. It 100% delivers on the promise of abstracting away the complexity of decision making."
David, Senior Software Engineer
@ Salesroom
"We're not worried about scaling because we can easily increase our load on Cerbos. It will also be easy for us to change how we're distributing policies as we reach different points of scale."
Joe, CEO & Co-Founder
@ Nook
"We went from one user - every role, to a world where there are many users - many roles. And the product, it relies on Cerbos to actually bring the value that we want to bring to customers. All of our customers are relying on Cerbos, by relying on the product, which is of course relying on Cerbos."
Chuck, Head of Engineering
@ Salesroom
"Instead of thinking of how much time Cerbos has saved us, I think about how much time it didn't cost us. It didn't cost us any time. Cerbos just works. I don't have to think about it. It's as simple as that."
Steve, Staff Engineer
@ NTWRK
"One of our big considerations was speed. We have strict latency tolerances. When it comes to Cerbos - you can call it a hundred times during a request and it doesn't matter. It's incredibly fast."
Engin, Head of Product and Growth & Co-Founder
@ Debite
"If it wasn't for Cerbos, one thing is for sure - we would've launched later than we did. As a result, we would have less customers. And the maintenance part is also very important. Our technical team would be dealing with daily stuff regarding access controls, access logs. Now, we don't have to spend any time on that."
Rounak, Founding Engineer
@ CommandK
"Cerbos policy writing is quite flexible, and deploying as a unit microservice as well. Cerbos "doesn't get in the way" once integrated, that's the best part."
Romina, Tech Lead
@ Wizeline
"It is easy to implement and provides a solution for a problem that is often not properly addressed."
Henry, CTO & Co-Founder
@ Nook
"Having the separation of the permissions from the code base just makes the code base more elegant. It makes the permissioning more elegant. It means they're centralized, so they're not tied to specific endpoints. And ultimately it means that different business owners have the ability to actually make updates."
Rasmus, CTO
@ Firtal
"Just discovered your embedded testing framework. This is probably the best balance between hyperfocused functionality and embedded tooling I've ever seen in an open source project. Damn, good work!"
Most popular resources
Cerbos Policy Decision Point
Want to run authorization yourself?
Playground
Prototype policies in your browser right now
Docs
Check out our API reference and guides
Slack community
Join our community on Slack and learn
Success stories
Stories of Cerbos in production
Speak to an engineer
Book an intro call and learn more