Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Agent skill for writing authorization policies in Claude Desktop
Claude Desktop lets product, security, and engineering leads draft Cerbos authorization policies in plain English without writing YAML. This guide walks through installing the Cerbos policy skill, connecting your specs via MCP, validating against the real compiler, and producing a complete policy bundle ready for review and PR.
Identity security in 2026
Identity security explained. The pillars most vendors cover (authentication, IGA, PAM, ITDR, ISPM, identity fabric), the shift to machine and AI agent identities, and the runtime authorization layer where most identity security programs still have a blind spot.
EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents
The identity stack built for humans does not hold up for AI agents and ephemeral workloads. Takeaways from EIC 2026 on signal-driven authorization, action-based provisioning, delegation chains, token issuer risk, and the four questions every CISO should ask about agent identity in the next 12 months.
Query plan adapter for Elasticsearch (Java)
Externalized authorization with Cerbos. Translate policies into native Elasticsearch Query DSL using the PlanResources API. Push access control to the database layer, avoid post-fetch filtering, and scale secure search with nested query support and operator overrides.
Already have authentication? Here's the authorization layer you still need.
Identity providers cover authentication, not fine-grained access control. See the authorization gaps they leave and how to evaluate a solution.
How much does it cost to build authorization in-house?
The cost of building authorization in-house often runs into seven figures. This guide breaks down real numbers from Salesroom, Debite, Loop, and 4G Capital, plus the hidden costs of maintenance, compliance, and diverted developer time that most teams forget to estimate upfront.
Integrating Cerbos with Kong: A how-to guide for API gateway authorization
Learn how to integrate Cerbos with Kong to offload authorization decisions from your services and centralize policy enforcement at the gateway. This hands-on guide walks through a real setup using Docker Compose, custom plugins, and fine-grained access policies to secure every API request.
Tokens are authorization decisions: a guide to policy-driven token issuance
Tokens are authorization decisions, and most identity teams don't manage them like one. This article explains policy-driven token issuance, the three patterns Gartner calls Authorization Management Platforms, what AuthZEN changes, and how to govern AI agent tokens without hardcoding logic into the IdP.
Query plan adapter for Convex
Externalized authorization with Cerbos moves access control into policy files and pushes filtering to the data layer. Learn how the PlanResources API and a new Convex adapter generate efficient, secure queries without row-by-row checks.
What is a Runtime Authorization Platform
Runtime Authorization Platforms explained. What runtime authorization actually means, how it differs from admin-time and event-time controls, why attacks land on the runtime layer, and what separates a real runtime platform from a policy engine. Covers architecture, deployment shapes, AuthZEN, and continuous evaluation.
It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governance
AI agent drift needs more than a kill switch. CISOs and IAM leaders in regulated industries are moving to a dimmer switch model, fine-grained runtime authorization that narrows agent access without breaking the workflow, with a complete audit trail of every decision and policy change.
Query plan adapter for Drizzle ORM
Externalized authorization with Cerbos PlanResources API and Drizzle ORM. Generate efficient, policy-driven SQL filters from query plans. Avoid row-by-row checks, reduce database I/O, and enforce scalable access control at the query layer with @cerbos/orm-drizzle.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
