Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
AuthZEN wins Outstanding Project Recognition at EIC 2026
OpenID AuthZEN won the Outstanding Project Recognition award at EIC 2026, with Cerbos CPO Alex Olivier co-chairing the working group. Here's what the interoperability standard means for authorization, why it matters as AI agents act on behalf of users, and how Cerbos implements it.
Choosing the right deployment model for enterprise authorization
Understand the deployment models available for your authorization system - cloud hosted, self hosted, on premise. See what drives the choice between them, and what each one means for your team in practice.
The Meta AI hack shows why agents shouldn't decide access
AI agent authorization broke wide open when hackers talked Meta's support chatbot into resetting Instagram passwords. This breaks down the confused deputy problem, why authentication alone doesn't fix it, and why access decisions belong in externalized authorization the agent can't argue its way past.
Agent skill for writing authorization policies in Claude Code
Claude Code lets engineers draft authorization policies in plain English, right in the terminal. This guide covers installing the policy skill through the plugin marketplace, invoking it with /cerbos-policy, what a session looks like, validating against the real Cerbos compiler in Docker, and where human review still matters.
Authorization for AI agents: What to build before the EU AI Act deadline
What runtime policy at the orchestration layer means, why the agent-to-tool layer is the missing category in agentic AI governance, and which EU AI Act articles actually apply to infrastructure vendors. Practical steps for CTOs and security leads on inventorying agents, sponsoring identities, and externalizing authorization.
Authentik vs Keycloak: Self-hosted IdP comparison
Compare Authentik and Keycloak for self-hosted IAM. See SSO, MFA, protocol support, operations, authorization limits, and where Cerbos fits.
Mapping business requirements to authorization policy for automotive
Authorization in enterprise automotive platforms covers more than roles. This guide explains why RBAC fails for software-defined vehicles, how ABAC and policy-as-code govern OTA updates, ECU diagnostics, and supplier access, and how Cerbos handles workforce, partner, customer, and non-human identities across the vehicle lifecycle.
Fine-grained authorization for AI gateways
Fine-grained authorization for AI gateways, explained. Why gateway authentication stops short of access control, how attribute-based policies govern model calls, tool invocations, MCP methods, and agent-to-agent delegation, and how Cerbos provides the runtime policy layer for every AI request.
EIC 2026: Stop counting agents, protect what they can touch
AI agent authorization was the question every IAM team brought to EIC 2026. Inventory tells you which agents exist. It does not decide whether an agent should move money, call a tool, or act through a delegated user. Notes on the vault, delegation chains, dynamic authorization, and EU AI Act audit.
Agent skill for writing authorization policies in Claude Desktop
Claude Desktop lets product, security, and engineering leads draft Cerbos authorization policies in plain English without writing YAML. This guide walks through installing the Cerbos policy skill, connecting your specs via MCP, validating against the real compiler, and producing a complete policy bundle ready for review and PR.
Identity security in 2026
Identity security explained. The pillars most vendors cover (authentication, IGA, PAM, ITDR, ISPM, identity fabric), the shift to machine and AI agent identities, and the runtime authorization layer where most identity security programs still have a blind spot.
EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents
The identity stack built for humans does not hold up for AI agents and ephemeral workloads. Takeaways from EIC 2026 on signal-driven authorization, action-based provisioning, delegation chains, token issuer risk, and the four questions every CISO should ask about agent identity in the next 12 months.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
