Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.

Cloud native chronicles: Lessons learned from building Cerbos in the open
What does it actually mean in practice to be Cloud Native? Having spent the last 2 years building the open source authorization layer Cerbos, we will cover the key software ingredients that contribute to a successful cloud-native project. Hear some of the hard-learned lessons, and the most sought-after aspects when venturing into your own cloud-native endeavours.

Revolutionize your authorization with Cerbos: A comprehensive video demo | ByteGrad
Discover how Cerbos simplifies authorization for microservices and Next.js applications in this video. Dive deep into Cerbos Hub's capabilities with a practical demo, showcasing ease of management and deployment. Watch now to enhance your security strategy.

Insights from KubeCon Europe 2025 - AI gets real, and identity gets serious
KubeCon Europe 2025 revealed a shift from AI hype to real-world operations, spotlighting the rise of identity-first architecture and policy-based access control. From secure workload identities to operationalizing AI, the cloud-native community is embracing maturity with scalable, secure infrastructure.

Cerbos Hub Audit Logs Live in Beta
Explore Cerbos Hub Audit Logs, now in beta! Capture detailed access and decision records across your PDPs, enabling faster debugging, enhanced security, and compliance verification. Ideal for developers, security engineers, and product managers, this feature streamlines your workflow and provides deep insights into authorization decisions.

Introducing Cerbos Hub Playground engine settings
This update to the Cerbos Hub Playground introduces new settings, which let you configure the Cerbos PDP engine used when evaluating policy during development, in a way that reflects your actual environment.

Recap of webinar: "Simplify access controls in Node.js, React & serverless apps" | Cerbos & ByteGrad
Join Alex Olivier, Cerbos Chief Product Officer, and Wesley, presenter of the popular ByteGrad Youtube channel, as they demonstrate how to author permissions and policy changes using Cerbos, and deploy those changes without changing any other code.

From OPA to our own engine - the Cerbos journey
When we started building Cerbos in January of 2021, we had a clear mission. We wanted to help developers separate their roles and permissions management from the core application code, creating a more scalable and future-proof way of handling permissions. This is the story of how we began with Open Policy Agent (OPA) and eventually built our own policy decision engine, and why that transition was crucial for our product's evolution.

Introducing enhanced test management in Cerbos Hub - Search, filter, and view test results easily
The new search and filter capabilities within Cerbos Hub take the pain out of testing and troubleshooting policies for users who run a large number of tests.

What is admin-time / static authorization?
This article will explain what admin time authorization is, why it matters for software architects and developers, and how it contrasts with dynamic, run-time checks. We’ll also touch on real-world scenarios to illustrate the concept, and briefly discuss how newer solutions tie these models together for better security and compliance.

Implementing an authorization model for a SaaS application
SaaS applications require robust authorization models, although selecting the right approach for your system can be daunting. This article outlines a solid method for implementing authorization within a typical workspace SaaS application.

What is data authorization?
Data authorization provides fine-grained access control. Understand why data authorization matters, and how organizations can implement it to reduce risk, meet compliance requirements, and enhance user experience.

How Cerbos works
Discover how Cerbos can integrate seamlessly into your existing software ecosystem. In this blog post, we go through Cerbos' functionality, main features, and the benefits of using Cerbos for fine-grained authorization in your applications.
Recommended content

Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers

Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization

Framework for evaluating authorization providers and solutions
