Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.

Decoupled authorization: Navigating technical challenges and best practices
Emre Baran examines decoupled authorization for secure software development, and goes over points that should be considered prior to implementing decoupled authorization.

Taking the pain out of authorization and user permissions
Cerbos separates authorization logic from the application code, boosting scalability, security, and adaptability. This separation makes updating authorization straightforward, enabling swift and secure adjustments to meet ever-changing business needs.

Cerbos Cloud support, Kafka sink and improved test outputs - Cerbos v0.26 Release
The latest release of Cerbos - v0.26 - includes support for Cerbos Cloud, a Kafka sink for audit logs and improvements to the tests output.

How to use Cerbos effectively
We are committed to making Cerbos a delightful piece of software to use, and, in this article, we aim to showcase all the (free!) developer productivity tools and features that we have built to achieve that goal.

Why audit logs are important
Audit logs capture information about key events that occur within software systems, and create a historical record. Administrators and compliance teams can use them to investigate user actions, spot suspect activity, and adhere to regulatory frameworks.

How decoupling can help you write better software
In this article, we look at the basics of decoupling, how decoupling can help you write better software and what to look for when identifying components for decoupling.

How to secure your Remix app routes with Cerbos?
In this tutorial, we will show you how to secure your Remix app routes with Cerbos. Cerbos is an open-source policy engine for authorizing access to resources. We gonna walk you through the steps of applying authorization in your Remix app with Cerbos. We will also show you how to use Cerbos to secure your routes and APIs.

Should you choose gRPC over REST when designing your APIs?
If you head up a development team, then choosing which architectural style to use is a critical decision to make when building up an IT infrastructure. APIs remain an important part of this decision making process; they are mediators through which information is sourced and transferred.

Accessing Protected Resources in Next.js with Prisma
Combine the power of Next.js and Prisma to build fast, secure, and dynamic web applications by integrating Cerbos, the open-source authorization layer

How to run your software startup more effectively
Running an effective software engineering organization is a formidable task at the best of times. Being a startup β especially when the core product is software β adds an extra dimension of difficulty on top of this because of the need to move fast and deliver in an extremely resource constrained environment.

Simplifying administrative tasks with the Admin API - Cerbos v0.25 Release
The latest release of Cerbos, v0.25, contains improvements to the Admin API to make administrative tasks easier and error-free.

Supercharging your policy rules with self-service custom roles
Managing self-service custom roles, with static attributes, or dynamic updates
Recommended content

Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers

Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization

Framework for evaluating authorization providers and solutions
