Guide
All articles tagged Guide.
How to Add Authorization in a Node.js Application
Our guide demonstrates how to add authorization to a Node.js web application.
Building a shared authorization vocabulary with Cerbos variables
Cerbos variables let you create a shared authorization vocabulary. Your platform or security team defines what these core concepts mean once. Product teams then build their features using these pre-validated, centrally-managed definitions without worrying about the implementation details.
Strategies for securing Non-Human Identities
Strategies for securing Non-Human Identities. A 6-step framework covering Zero Trust, least privilege, lifecycle governance, metrics, and standards like SPIFFE and OIDC to protect AI agents, services, and workloads.
Trace authorization decisions and track organization-wide usage with new Cerbos Hub features
Authorization debugging just got easier. We're shipping two features that tackle problems we've heard about repeatedly from customers running Cerbos at scale: understanding why specific authorization decisions were made and getting visibility into usage patterns across multiple teams.
Guide to Java authentication and authorization
Authorization technologies have seen significant changes and advancements in recent yearsâespecially when it comes to Java. This article provides an overview of the evolving landscape to help you choose the best authorization framework for your Java application.
PBAC is back. Why policyâbased access control is trending again for enterprise security
Discover why Policy Based Access Control (PBAC) is making a comeback. Learn PBAC benefits for enterprises, how to implement PBAC with Cerbos, and why analysts like KuppingerCole name it a top identity and security trend.
Safeguarding non-human identities: Understanding and addressing the OWASP top 10 threats
In this article, weâll review each of the top 10 NHI threats, explain their real-world implications, and discuss how you can mitigate them. Weâll also demonstrate how Cerbos can help address some of these risks by enforcing fine-grained, contextual authorization rules for NHIs. Learn how to manage non-human identities securely.
Using Cerbos PDP with the Java Spring Security Framework
Learn how to integrate the Cerbos Policy Decision Point with Java Spring Security to replace hard-coded, scattered permission checks with clean, policy-driven authorization. This hands-on guide walks you through building a declarative, annotation-based approach that keeps your business rules flexible, maintainable, and out of your application code.
The technical complexities of externalized authorization
Externalizing the authorization module can bring about a host of benefits. But what are the complexities of this approach? And how can they be addressed? In this guide, you can familiarize yourself with the important technical aspects of externalizing authorization.
The ROI of NHI security: Why investing in machine identity protection pays off
Unsecured NHIs are not just a technical oversight, but a full-blown business liability. Unsecured machine identity can trigger downtime, compliance failures, and multi-million-dollar losses. Learn the risks associated with NHIs, the cost of not securing them, and how to approach a solution that is policy-based, and future-proof.
Announcing the new Cerbos Hub usage dashboard
We are excited to launch the new usage dashboard in Cerbos Hub. This new feature provides a comprehensive, real-time view of your authorization service, allowing you to monitor key metrics, analyze trends, and gain valuable insights into your policies and their consumers.
Deploying Cerbos PDP on AWS Lambda and API Gateway: Step-by-step guide
Cerbos makes it easy to decouple and scale your access control with policy-as-code. In this guide, youâll deploy a fully serverless Cerbos PDP using AWS Lambda and API Gateway, with audit logging, S3-based policies, and flexible endpoint protection.
Integrating scalable authorization in .NET
Struggling with brittle role-based authorization in .NET Core Identity? This hands-on guide shows how to decouple complex access logic from your application by integrating Cerbos as a custom authorization providerâenabling scalable, policy-driven access control without scattering business rules across your codebase. Learn how to plug Cerbos into your ASP.NET Core pipeline and write policies that adapt as fast as your requirements do.
Advanced multi-tenant SaaS authorization with Cerbos: Role policies and scoped resource policies
Learn how Cerbos, with features like role policies and the fine-grained control offered by scoped resource policies (governed by scope permissions mode), provides a powerful toolkit to define and enforce multi-tenant security effectively.
Supercharging LLM understanding of Cerbos documentation
Learn how Cerbos improves Large Language Model (LLM) comprehension of its documentation using the new llms.txt standardâplus an open-source Antora plugin to help others do the same.
Context Aware Auth0 Authorization: RBAC & ABAC
For complex and dynamic applications in Auth0, a dedicated authorization system (more than just RBAC) is required â enter ABAC!
Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers
Learn how to building a secure MCP server where AI Agent tool access is managed by Cerbos, a decoupled, policy-driven Authorization service. You will learn how to enforce fine-grained authorization by externalizing access controls into human-readable policies.
Don't fetch that. A developer's guide to pre- vs. post-filtering for authorization
While the initial simplicity of post-filtering is alluring, itâs a solution with a ceiling. It creates performance bottlenecks and security concerns that are difficult to engineer your way out of later. For modern, scalable, and secure applications, pre-filtering is the clear winner - you build a system that is performant, secure by design, and ready for future growth. And for those who need absolute certainty, the hybrid approach offers truly bulletproof authorization.