Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
REST vs. gRPC
Explore the two leading ways for building APIs: REST and gRPC, and what use case each one is best for.
Lenient scope search in Cerbos policies
This piece talks about one of the newest Cerbos features, introduced in v0.29. Lenient Scope Search means that if a policy with passed scope does not exist in the store, Cerbos will attempt to find a partial match by searching the policy within scopes that are part of the same hierarchy as the passed scope.
Flexible policy composition - Injecting environment specific information into Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece you'll learn how to use the new globals field in order to define a single set of access control policies for multiple environments.
Flexible policy composition - Local & export variables in Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece we'll explore how to leverage exportVariables feature and compare it with the old approach of using local variables within policies.
Leveraging SAML SSO with Cerbos and BoxyHQ: Elevating enterprise authorization
In a recent step-by-step tutorial, Senior Developer at BoxyHQ, Kiran K, walked through the process of integrating BoxyHQ's open source Enterprise SSO solution, SAML Jackson, with Cerbos to enable SAML SSO-based (Single Sign-On) enterprise authentication and authorization, with Okta as the Identity Provider (IdP).
Shared variables, globals, scope updates and more - Cerbos v0.29
The v0.29 release of Cerbos is packed with new features such as shared variables, support for globals, updates to scopes and more.
Nested fields support with Prisma Query Plans
Supporting nested relation fields with the Prisma Query Plan adapter
Authorization remains #1 issue - OWASP 2023 Top 10 List
The top issue of the 2023 edition of the OWASP Top 10 is, yet again, authorization. In this blog post we explore the importance of authZ and approaches to mitigating access control vulnerabilities.
Unlocking cybersecurity: A deep dive into authentication vs authorization in software development
In a piece for TechBullion, Emre Baran explores the significance of authentication and authorization in software development. The piece delves into the methodologies of these cybersecurity measures, highlighting their relevance in ensuring the protection of systems and data. Baran underscores the necessity of understanding these aspects to develop a resilient, user-friendly, and threat-resistant digital environment.
Policy outputs, storage overlays and more - Cerbos v0.27 & v0.28 Release
Cerbos v0.27 & v0.28 adds support for user-defined outputs from policies, storage overlay support for fallback scenarios also Kafka and tests suites updates
The power of secure code in protecting digital environments
In a Forbes article by Adrian Bridgwater, Cerbos' Product Lead, Alex Olivier, underscores the often-overlooked importance of secure coding. Olivier advocates for prioritizing code integrity and outlines five key pillars of secure code to safeguard software and protect organizational reputation.
Securing your business's digital frontier: A comprehensive guide to identity and access management
This piece by Alex Olivier for HackerNoon, delves deep into the world of Identity and Access Management (IAM), outlining its pivotal role in fortifying business cybersecurity, enhancing operational efficiency, and ensuring regulatory compliance.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
