An open-core, language-agnostic authorization solution for implementing and managing context-aware access control policies.
Cerbos is an open-core, language-agnostic authorization solution that simplifies implementing and managing user permissions. It allows developers to write context-aware access control policies for application resources in YAML, providing APIs to evaluate these policies dynamically. It solves the problem of complex, hard-coded authorization logic by separating it from the main application code.
Developers and engineering teams building applications that require fine-grained, scalable access control across microservices or complex systems.
Developers choose Cerbos for its simplicity in defining policies as code, its language-agnostic design that works with any tech stack, and its ability to scale from RBAC to complex ABAC without refactoring application logic.
Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Provides official SDKs for Go, Java, JavaScript, .NET, PHP, Python, Ruby, and Rust, plus cURL, enabling integration across any tech stack without language lock-in.
Policies are defined in YAML and can be stored in Git, cloud storage, or databases, supporting version control, collaborative editing, and CI/CD workflows for authorization rules.
Runs as a stateless PDP in Kubernetes, systemd, AWS Lambda, or as a self-hosted service, ensuring scalability and adaptability to various infrastructure needs.
Extends RBAC with attribute-based conditions and derived roles, allowing granular permissions based on contextual data without refactoring application logic.
Requires deploying and managing a separate Policy Decision Point service, which adds infrastructure overhead, network latency, and potential points of failure compared to embedded libraries.
Defining complex ABAC rules in YAML with Cerbos' specific syntax can be error-prone and lacks a built-in UI, relying on external tools like Cerbos Hub for efficient editing and testing.
Advanced features such as policy distribution and interactive playgrounds are tied to Cerbos Hub, a proprietary cloud service, which may create dependency and limit flexibility for self-hosted setups.