Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Building your own authorization solution vs. buying an off-the-shelf one
Build vs. buy for authorization. There is no standard answer to the perennial build vs. buy question, but the argument for rolling your own authorization is getting harder to make. In this article, we help you speedrun the build vs. buy decision by breaking down your choices, so you can evaluate what’s best for your situation.
Zero trust has reached operational reality
Zero Trust is no longer theoretical. Discover how mature identity standards and centralized authorization transform Zero Trust from strategy to execution, delivering continuous compliance, reduced breach impact, and faster, more secure development.
Modern application architecture trends: AI, microservices, and pragmatic security
Explore modern application architecture trends for AI-driven infrastructure, modular monoliths, microservices, and pragmatic security, as well as patterns shaping cloud, on-prem, and hybrid systems.
Zero-Trust for microservices, a practical blueprint
Learn how to implement a Zero-Trust security model for microservices. Discover how to secure service-to-service communication, manage workload identities, and enforce fine-grained authorization across distributed systems, AI agents, and APIs.
How to implement resource-based authorization
Learn how to implement resource-based authorization for fine-grained, contextual access control. Compare it to role-based and attribute-based models, explore real-world use cases, such as in microservices and multi-tenant SaaS applications.
What is access control?
Learn what access control is, why it’s essential, and how it operates within application environments. We’ll also explore some common challenges developers face when implementing access control and review the types of technologies that can streamline the process.
How to secure your FastMCP server with permission management
FastMCP is a Python framework for building production-ready MCP servers with minimal code. Without authorization, these servers risk exposing all tools to every user. The **cerbos-fastmcp** middleware adds policy-driven, fine-grained access control to secure FastMCP deployments.
NHI security: How to manage non-human identities and AI agents
Discover NHI security: How to manage non-human identities and AI agents with practical principles. Learn strategies for inventory, least privilege, access controls, and authorization to secure NHIs and prevent AI risks in modern enterprises.
MCP security & AI agent authorization. A CISO and architect’s guide to securing the new AI perimeter.
MCP security and AI agent authorization are critical to protecting enterprise data. This guide explores risks, the “confused deputy” problem, and how externalized authorization builds a zero trust model to secure the new AI perimeter without slowing innovation.
MCP permissions. Securing AI agent access to tools.
In this article, we explore what MCP is and how it works, why MCP permissions are so important, where current approaches fall short, and how adopting fine-grained, dynamic authorization can secure AI agent tool use. The goal is to harness the new power of AI agents safely, giving them exactly the access they need and nothing more.
Mapping business requirements to authorization policy for medtech
Learn how to translate business requirements to authorization policy for medtech. Decouple authorization to keep medtech platforms compliant (HIPAA, GDPR, FDA 21 CFR Part 11, NHS RBAC), resilient to updates, and safe. Explore break-glass access, audit logs, role-based control, and an example case study.
Filtering database results with Cerbos query plans
Learn how Cerbos PlanResources API uses partial evaluation to streamline authorization. Discover how query plans translate into efficient database filters, boost performance, and simplify access control with custom adapters.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
