Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Comparing User Permissions Strategies
Microservices architectures are the dominant force in today’s software engineering realm. This infrastructure approach—despite its multiple benefits—has created quite a tangled management web. IBM has corroborated this, sharing that applica...
Broken Access Control is the #1 issue in OWASP 2021 Top 10
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. Many will be familiar with the OWASP Top 10 which is published every few years and is used as the standard for evaluating the security of web applications. The 2021 T...
The never-ending product requirements of user authorization
This article first appeared on alexolivier.meI’ve been fortunate to work as a Product Manager across eCommerce, Marketing, Supply Chain, Fitness and Finance, and ...
Fully featured authorization for your Prisma app with Cerbos
Prisma has come onto the Node/Typescript scene recently as a new generation of ORM. With it’s strongly-typed client, schema abstraction and great documentation, it is turning into the natural choice for modern applications. This article covers setting u...
The Case for Granular Permissions
Presenting the case for granular permissions to help you select the right authorization scheme to make authorization easier.
Changing Business Logic in an Evolving System
Have you ever had to change existing business logic that was hard to understand? Did it break unrelated parts of the system when it was changed? Perhaps it had really poor documentation.Some of the most difficult software projects I’ve worked on involved working with and main...
The Hidden Costs of User Authorization
Authentication and authorization are the two central pillars of security of any application. Authentication is the identification of valid users and authorization is the process of determining what those users are allowed to do. User authorization plays a crucial role in securing access to your a...
Why are we building Cerbos?
We are building Cerbos because when it comes to building key pieces for software infrastructure and frameworks, we believe software engineers should not reinvent the wheel. Authorization is often an inconvenient necessity -- especially for new projects. You have a great idea, build ...
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
