Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Guide to Java authentication and authorization
Authorization technologies have seen significant changes and advancements in recent yearsâespecially when it comes to Java. This article provides an overview of the evolving landscape to help you choose the best authorization framework for your Java application.
PBAC is back. Why policyâbased access control is trending again for enterprise security
Discover why Policy Based Access Control (PBAC) is making a comeback. Learn PBAC benefits for enterprises, how to implement PBAC with Cerbos, and why analysts like KuppingerCole name it a top identity and security trend.
How Cerbos helped Nook build secure and extensible roles and permissions
A secure, scalable and extendable authorization solution enables exponential business growth.
Safeguarding non-human identities: Understanding and addressing the OWASP top 10 threats
In this article, weâll review each of the top 10 NHI threats, explain their real-world implications, and discuss how you can mitigate them. Weâll also demonstrate how Cerbos can help address some of these risks by enforcing fine-grained, contextual authorization rules for NHIs. Learn how to manage non-human identities securely.
Using Cerbos PDP with the Java Spring Security Framework
Learn how to integrate the Cerbos Policy Decision Point with Java Spring Security to replace hard-coded, scattered permission checks with clean, policy-driven authorization. This hands-on guide walks you through building a declarative, annotation-based approach that keeps your business rules flexible, maintainable, and out of your application code.
The technical complexities of externalized authorization
Externalizing the authorization module can bring about a host of benefits. But what are the complexities of this approach? And how can they be addressed? In this guide, you can familiarize yourself with the important technical aspects of externalizing authorization.
Recap of webinar: "Business case for externalized authorization"
Alex Olivier and Dan Maher discuss the complexities of managing user permissions as businesses grow. They highlighted external authorization as a scalable and flexible solution that enhances security, supports compliance, and streamlines operations, fostering sustainable growth and efficient access control.
Why external authorization is essential for modern software architecture
External authorization simplifies access control by centralizing policies, improving scalability, and enhancing security. This approach reduces development complexity, ensures consistency across systems, and makes compliance easier to manage. Explore the benefits and practical steps for implementation in this article.
The ROI of NHI security: Why investing in machine identity protection pays off
Unsecured NHIs are not just a technical oversight, but a full-blown business liability. Unsecured machine identity can trigger downtime, compliance failures, and multi-million-dollar losses. Learn the risks associated with NHIs, the cost of not securing them, and how to approach a solution that is policy-based, and future-proof.
Announcing the new Cerbos Hub usage dashboard
We are excited to launch the new usage dashboard in Cerbos Hub. This new feature provides a comprehensive, real-time view of your authorization service, allowing you to monitor key metrics, analyze trends, and gain valuable insights into your policies and their consumers.
Deploying Cerbos PDP on AWS Lambda and API Gateway: Step-by-step guide
Cerbos makes it easy to decouple and scale your access control with policy-as-code. In this guide, youâll deploy a fully serverless Cerbos PDP using AWS Lambda and API Gateway, with audit logging, S3-based policies, and flexible endpoint protection.
Integrating scalable authorization in .NET
Struggling with brittle role-based authorization in .NET Core Identity? This hands-on guide shows how to decouple complex access logic from your application by integrating Cerbos as a custom authorization providerâenabling scalable, policy-driven access control without scattering business rules across your codebase. Learn how to plug Cerbos into your ASP.NET Core pipeline and write policies that adapt as fast as your requirements do.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
