Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Meet four new use cases in the updated Cerbos Hub
Cerbos Hub gives engineering, security, and IAM teams everything they need to manage authorization across any architecture at any scale. Learn about four new use cases: Fine-grained tenant specific authorization, dynamic policy management at scale, scalable NHI permission management, secure authorization for MCP servers.
Updated Cerbos Hub, the complete authorization solution for your Identity Fabric
Itâs been a big year for Cerbos Hub. The latest release makes Cerbos Hub the centralized control plane for every authorization decision across applications, AI agents, services, and workloads. Organizations can now manage authorization for every identity in their system with full visibility, consistent policy enforcement, and alignment with a Zero Trust strategy.
Advanced multi-tenant SaaS authorization with Cerbos: Role policies and scoped resource policies
Learn how Cerbos, with features like role policies and the fine-grained control offered by scoped resource policies (governed by scope permissions mode), provides a powerful toolkit to define and enforce multi-tenant security effectively.
Supercharging LLM understanding of Cerbos documentation
Learn how Cerbos improves Large Language Model (LLM) comprehension of its documentation using the new llms.txt standardâplus an open-source Antora plugin to help others do the same.
Context Aware Auth0 Authorization: RBAC & ABAC
For complex and dynamic applications in Auth0, a dedicated authorization system (more than just RBAC) is required â enter ABAC!
Patterns of failure in modern authorization
Authorization has evolved from simple UNIX permissions to complex distributed systemsâand it's easier to get wrong than ever, as recent failures at Facebook, Okta, and Microsoft show. In this article, we'll walk through the history of authorization, break down three high-profile incidents at major tech companies, and share practical patterns to help you avoid becoming the next case-study.
Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers
Learn how to building a secure MCP server where AI Agent tool access is managed by Cerbos, a decoupled, policy-driven Authorization service. You will learn how to enforce fine-grained authorization by externalizing access controls into human-readable policies.
Techniques for handling failure scenarios in microservice architectures
This article explores the strategies for managing failure scenarios in microservice architectures. It covers techniques to address both technical glitches and business impacts. You will learn how organizations can build fault-tolerant systems that are capable of gracefully handling cascading failures while maintaining core functionalities, even in a degraded state.
Don't fetch that. A developer's guide to pre- vs. post-filtering for authorization
While the initial simplicity of post-filtering is alluring, itâs a solution with a ceiling. It creates performance bottlenecks and security concerns that are difficult to engineer your way out of later. For modern, scalable, and secure applications, pre-filtering is the clear winner - you build a system that is performant, secure by design, and ready for future growth. And for those who need absolute certainty, the hybrid approach offers truly bulletproof authorization.
Practices that set great software architects apart
Great software architects donât just make technical decisionsâthey balance competing priorities, navigate messy org charts, and align engineering with business strategy. This post explores the habits and mindset that separate competent architects from truly impactful ones, and why those differences matter. Whether you're eyeing the role or already in it, these are the practices that move the needle.
Cerbos PDP v0.44 & v0.45: Multi-action query plans, smarter role prioritization, and more
Learn about the two recent releases of the Cerbos Policy Decision Point: v0.44.0 and v0.45.0. These versions bring a powerful new capability to the PlanResources API, address some important bugs, and continue our work on improving the core engine.
Authorization and access control in Vue.js with Cerbos
Managing access control directly in Vue components and stores doesn't scale. This tutorial explains how to externalize authorization logic with Cerbos, using policy-as-code to enforce consistent, attribute-driven permissions across your appâwithout cluttering your templates or Vuex logic.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
