Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Embracing WebAssembly in authorization | Cerbos, KubeCon + CloudNativeCon Paris
The intersection of Kubernetes, cloud-native solutions, and WebAssembly (WASM) represents a frontier of innovation. At the recent KubeCon EU conference, Alex Olivier, CPO and Co-Founder of Cerbos, shared insights during an interview with Milo Oudenaller from Amazic.
Access control and permission management for AI agents: building with security in mind
AI-powered chatbots and agents are value-adding features for many companies, helping both company employees and external users, who interact with the company products. The key challenge here is that these chatbots should provide contextually useful responses that would solve users' problems without leaking sensitive information. Read on to see how this can be achieved.
Role-based access control best practices: 11 top tips
Role-Based Access Control is an access control model based on clearly defined roles. Read on to learn more about Role-Based Access Control best practices.
Cerbos Playground: Dive into the RBAC policy generator
Access control in modern applications is crucial to ensure data privacy and system integrity. As applications become more complex and interconnected, so does the need for a more simplified way to manage access controls. This piece showcases Cerbos Playground's newest feature - the RBAC Policy Generator.
Cerbos Dagger module for authorization testing
Introducing the Cerbos Dagger module: a tool to streamline authorization testing by externalizing policies, integrating with CI pipelines, and simplifying permission management. Learn how this module can enhance your application's security and maintainability. Watch the demo and explore more on GitHub.
Understanding security and access control requirements of microservices environment
Learn how you can implement robust security protocols and access control measures to ensure inter-services communicating is not compromised.
Authorization in developer workflows: best practices and tools
Authorization can be a powerful enabler of developer creativity and seamless user experiencesâbut only when treated as a first-class workflow concern. Explore how modern authorization patterns can improve security, productivity, and the developer experience itself!
5 common authentication methods for NHIs
Deep dive into NHI authentication. Learn 5 common methods for authenticating non-human identities, their architecture, use cases, and security posture.
3 Most Common Authorization Designs for SaaS Products
There are many ways to design and implement an authorization system. Read this article to discover the 3 most common authorization designs for SaaS products.
What is run-time authorization?
Explore what run-time authorization is, how it compares to admin-time models, and when it makes sense to use each. Youâll learn how run-time checks work, why they matter, and how they help strike a balance between flexibility, security, and control. We'll also touch on tools and design patterns that make dynamic access decisions practical to implement.
Simple role-based access control in Ruby
Tired of tangled if statements and scattered permission logic? This post walks through the evolution from DIY role checks in Ruby to scalable, production-grade authorization using Cerbosâimproving your flow without rewriting your app.
Designing a Zero Trust Architecture: 20 open-source tools to secure every layer
Explore 20 open-source tools to implement Zero Trust Architecture across firewalls, network segmentation, encryption, workload identity, authentication, and authorization layers. Enhance security by eliminating implicit trust and enforcing continuous verification at every level.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
