---
title: "Introducing Cerbos Hub Insights: A live view of what your authorization layer is doing"
description: "Cerbos Hub Insights aggregates the decisions your PDPs make into charts and rankings, so patterns like a spike in denials become obvious without scrolling the audit log. Track allows, denies, and active principals over time, built entirely from audit data you already send to Cerbos Hub."
author: "Alex Olivier"
date: "2026-06-08T14:56:53.055Z"
canonical: "https://www.cerbos.dev/blog/cerbos-hub-insights-live-view-of-what-your-authorization-layer-is-doing"
image: "https://stylish-appliance-1c1cc1c30d.media.strapiapp.com/Introducing_Cerbos_Hub_Insights_A_live_view_of_what_your_authorization_layer_is_doing_c0e30e0cff.png"
tags: ["documentation","guide","announcement"]
source: "https://www.cerbos.dev/blog/cerbos-hub-insights-live-view-of-what-your-authorization-layer-is-doing"
---

# Introducing Cerbos Hub Insights: A live view of what your authorization layer is doing

Most teams treat authorization as something that either works or doesn't. A request comes in, a decision goes out, and as long as nobody is locked out of something they should see, nobody thinks about it again. That works right up until the moment something changes. A policy gets tightened, a new service starts making calls, a client ships a typo in a resource name, and suddenly the shape of your authorization traffic looks nothing like it did last week. The problem is that most people have no way to see that shape in the first place.

That's the gap [Cerbos Hub](https://hub.cerbos.cloud) Insights closes. It's a new page in every workspace that turns the decisions flowing through your PDPs into a set of charts and rankings, so you can see at a glance what your authorization layer is actually doing in production.

> View the [documentation here](https://docs.cerbos.dev/cerbos-hub/insights).

## From individual decisions to the bigger picture

Cerbos Hub already gives you a detailed [audit log](https://docs.cerbos.dev/cerbos-hub/audit-log-collection) of every decision your PDPs make. That log is the right tool when you need to answer a specific question about a specific request. Who was denied, what were they trying to do, and which policy made the call.

What it doesn't do well is tell you about patterns. Scrolling through thousands of individual log lines isn't how anyone spots that denials have crept up since Tuesday, or that one principal is responsible for half the traffic in the workspace. Insights takes the same decision data and aggregates it, so the patterns become obvious without you having to go looking for them.

![cerbos hub authorization insights_overview.png](https://stylish-appliance-1c1cc1c30d.media.strapiapp.com/cerbos_hub_authorization_insights_overview_6d2285975b.png)

## What you can see

The top of the page is about decisions over time. There's an hourly view covering the last seven days, which is the one you reach for when something just happened and you want fine-grained detail. Below it, a daily view over the last thirty days smooths out the noise and makes longer trends easier to read. Both break decisions down into allows and denies, and you can toggle between showing allows, denies, or both overlaid.

The split between allows and denies is where a lot of the value sits. A sudden jump in denials is rarely random. It usually means a policy change landed that was stricter than intended, a client is asking for something that no longer exists, or an application bug is sending malformed requests. Seeing that jump on a chart is the difference between catching it in minutes and hearing about it from a frustrated user days later.

Alongside the decision charts is a daily count of active principals, so you can track how adoption of your authorization layer is growing over time and notice unexpected drops.

The rest of the page is about ranking the busiest things in your workspace over the last thirty days. There's a table of your most active principals, one for the most active resource kinds, and one for the most common resource and action pairs. Together they answer the question of what is actually being checked, in order of how often. The resource and action view is the most specific of the three, showing you the difference between, say, viewing an album and deleting one.

## Built on data you're already collecting

There's nothing new to wire up. Insights is built entirely from the decision data your PDPs already send to Cerbos Hub, so once [audit log collection](https://docs.cerbos.dev/cerbos-hub/audit-log-collection) is enabled and decisions start arriving, the page populates on its own. The charts also link straight back into the audit log, pre-filtered to match what you're looking at, so when something on a chart catches your eye you can drop into the underlying decisions without rebuilding the filter by hand.

Because Insights is built on audit data, it follows the same access rules. The page is only visible to workspace members who can view audit logs, which means the Owner and Analyst roles. If you don't have audit log access, the Insights tab won't appear in your workspace navigation. That keeps decision-level visibility in the hands of the people who are meant to have it.

## Try it

Insights is available now in every Cerbos Hub workspace with audit log collection enabled.

[**Open Cerbos Hub**](https://hub.cerbos.cloud) to see it on your own traffic, or [**book a call**](https://www.cerbos.dev/workshop) if you want to talk through how you're using authorization data today.

## FAQ

### What is Cerbos Hub Insights?

Cerbos Hub [Insights](https://docs.cerbos.dev/cerbos-hub/insights) is a new page in every Cerbos Hub workspace that turns the authorization decisions flowing through your PDPs into charts and rankings. Instead of scrolling individual log lines, you see at a glance what your authorization layer is doing in production, including decisions over time, active principals, and the busiest principals, resource kinds, and resource and action pairs.

### How is Cerbos Hub Insights different from the audit log?

The difference between Insights and the audit log comes down to scale. The audit log is the right tool when you need to answer a specific question about a specific request, like who was denied and which policy made the call. Insights takes that same decision data and aggregates it, so patterns such as a rise in denials or one principal driving half the traffic become obvious without you going looking for them.

### What authorization data can you see in Cerbos Hub Insights?

You can see authorization decisions over time in Cerbos Hub Insights, with an hourly view across the last seven days and a daily view across the last thirty. Both break decisions into allows and denies, and a daily count of active principals tracks adoption. The page also ranks your most active principals, most active resource kinds, and most common resource and action pairs over the last thirty days.

### Do I need to set up anything to use Cerbos Hub Insights?

You do not need to set up anything new to use Cerbos Hub Insights. It is built entirely from the decision data your PDPs already send to Cerbos Hub, so once audit log collection is enabled the page populates on its own. The charts also link straight back into the audit log, pre-filtered to match what you are viewing, so you can drop into the underlying decisions without rebuilding the filter by hand.

### Who can access Cerbos Hub Insights?

Access to Cerbos Hub Insights follows the same rules as audit logs, since the page is built on audit data. Only workspace members who can view audit logs see it, which means the Owner and Analyst roles. If you do not have audit log access, the Insights tab will not appear in your workspace navigation, keeping decision-level visibility with the people meant to have it.