Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.

Cerbos PDP v0.35.1: Enhancements, fixes, and a new admin API
Cerbos PDP v0.35.1 focus on refining the robustness of our policy decision platform with essential bug fixes and introducing new capabilities that provide deeper insights into policy configurations.

Building secure applications: Key insights on authentication and authorization from Cerbos and Microsoft Entra
Enhance software security through advanced authentication and authorization, explore the synergy between Microsoft Entra External ID and Cerbos. Learn the significance of choosing the right security approach, and discover how integrating these solutions empowers SaaS applications with robust, scalable security measures. A must-read for developers prioritizing data protection and compliance.

Modern software development in banking
Discover cutting-edge strategies for modernizing financial services software development. This blog post unveils insights from industry leaders on embracing DevSecOps, feature flags, authorization, and open source to overcome traditional banking challenges, driving innovation and efficiency in financial technology.

What is an authorization API?
An authorization API lets you implement access control policies and authorization independent of your core solution. It also forms a part of bigger trends towards centralized authorization strategies and zero trust models to prevent security incidents.

What is policy-based access control (PBAC)?
If you’ve ever asked yourself: what is Policy-Based Access Control (PBAC) and wondered if your company should adopt it, read this brief explanatory guide.

Coarse grained vs fine grained access control
One is easy to implement, the other is complex but provides precise control. Read this post for a comparison of coarse grained & fine grained access control.

How to Implement RBAC authorization in Nest.JS
Understanding the most common methods of integrating Cerbos authorization within NestJS.

SQLAlchemy authorization: How to implement RBAC & ABAC
Read our guide on how to set up SQLAlchemy with Cerbos for easy authorization or user permission aware data filtering or fetching in your application.

Guide to Web3 authorization & authentication
The decentralized nature of Web3 DApps requires a new generation of access controls. Read about them in our guide to Web3 authorization & authentication.

Guide to managing users and permissions
Read our guide to managing users and permissions; we look at the key role these activities play in ensuring the integrity of a company's digital resources.

Cerbos: Why and what
Discover how Cerbos revolutionizes application security by simplifying the implementation and management of roles and permissions and access controls, making authorization scalable and efficient across modern architectures, and fostering innovation with its open-source, agile-friendly approach.

The importance of stateless architecture in authorization systems
Going stateless might sound complicated, but it can actually simplify system deployment, maintenance, and integration. This article explores what stateless is, how it's implemented, and why it's so beneficial to real-world systems such as authorization services.
Recommended content

Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers

Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization

Framework for evaluating authorization providers and solutions
