Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
How to avoid common authorization errors for efficient access control
Discover the hidden pitfalls of authorization that could expose your application to serious security risks. Unpack common anti-patternsālike over-permissioning and hardcoded access logicāand explore practical strategies for building safer, more maintainable systems.
Cerbos PDP v0.42 & v0.43: SPIFFE identity support and smarter logging
Learn about the latest updates that bring new capabilities and improvements to Cerbos. With v0.42 and v0.43, we've added support for SPIFFE identities in policies, improved the structure of audit logs, and tightened the reliability of policy updates in live environments.
Authorization for non-human identities (NHIs) with Cerbos
Learn all about non-human identities - what they are, why securing them is important, along with how Cerbos can be used to effectively authorize NHIs.
SPIFFE identity parsing added to Cerbos PDP
Cerbos PDP now supports native parsing and evaluation of SPIFFE identities in authorization policies. This unlocks precise access control for non-human identities (NHIs) like services, workloads, and containers that rely on SPIFFE-based workload identity.
Insights from Gartner IAM Summit 2025 - Identity, authorization, and the road ahead
The 2025 Gartner Identity and Access Management (IAM) Summit in London brought the identity community face-to-face with the future. From the surge of machine identities to evolving authorization patterns and policy-based control, the event underlined a clear shift: identity and access are no longer just IT plumbing - they're strategic infrastructure.
A non-developerās guide to authorization APIs
As the digital realm becomes more interconnected and sophisticated, exponentially growing threats make breaches not just a possibility but an impending reality for those not adequately protected. At the heart of this safeguard is not just recognizing who a user is but strictly defining and overseeing what they can and cannot access.This is where Authorization comes into play.
11 best open source tools for Software Architects
Learn about the best open-source tools for software architects, from diagramming and modeling to access control. Discover tools like Graphviz, PlantUML, Mermaid, and Cerbos to enhance system design, collaboration, and security in your software architecture workflows.
Cerbos Prisma integration v2.0: More powerful fine-grained authorization
Latest update to the Cerbos reference Prisma Query Plan Adapter - making it even easier to enforce fine-grained access control within applications using Prisma ORM. In this blog post, weāll explore the new features, use cases enabled, and how you can start using it today.
Add fully featured authorization to your Prisma app
Read this guide and learn how to set up a basic CRM web application using Prisma for data storage and Cerbos for fully featured authorization.
Simple Role-Based Access Control in JavaScript
Learn how to integrate Cerbos into a JavaScript To-Do List application for robust role-based access control (RBAC). This guide covers setting up Cerbos, defining roles and permissions, and best practices for secure and scalable authorization management. Perfect for developers looking to enhance application security with fine-grained access control.
Guide to Kubernetes RBAC
Learn about Kubernetes RBAC, its core objects, and challenges such as scalability, manual management, and auditing. Discover best practices and how Cerbos helps simplify RBAC for Kubernetes, ensuring security and compliance with minimal effort.
Enterprise access control in service-oriented architectures
Choosing the right access control model for your enterprise isn't just a technical decision - itās a business one. Explore the challenges of role explosion, the advantages of attribute-based access, and how a hybrid approach can simplify authorization while ensuring compliance and security.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
