Guide
All articles tagged Guide.
5 common authentication methods for NHIs
Deep dive into NHI authentication. Learn 5 common methods for authenticating non-human identities, their architecture, use cases, and security posture.
3 Most Common Authorization Designs for SaaS Products
There are many ways to design and implement an authorization system. Read this article to discover the 3 most common authorization designs for SaaS products.
What is run-time authorization?
Explore what run-time authorization is, how it compares to admin-time models, and when it makes sense to use each. Youâll learn how run-time checks work, why they matter, and how they help strike a balance between flexibility, security, and control. We'll also touch on tools and design patterns that make dynamic access decisions practical to implement.
Simple role-based access control in Ruby
Tired of tangled if statements and scattered permission logic? This post walks through the evolution from DIY role checks in Ruby to scalable, production-grade authorization using Cerbosâimproving your flow without rewriting your app.
Designing a Zero Trust Architecture: 20 open-source tools to secure every layer
Explore 20 open-source tools to implement Zero Trust Architecture across firewalls, network segmentation, encryption, workload identity, authentication, and authorization layers. Enhance security by eliminating implicit trust and enforcing continuous verification at every level.
How to avoid common authorization errors for efficient access control
Discover the hidden pitfalls of authorization that could expose your application to serious security risks. Unpack common anti-patternsâlike over-permissioning and hardcoded access logicâand explore practical strategies for building safer, more maintainable systems.
Authorization for non-human identities (NHIs) with Cerbos
Learn all about non-human identities - what they are, why securing them is important, along with how Cerbos can be used to effectively authorize NHIs.
SPIFFE identity parsing added to Cerbos PDP
Cerbos PDP now supports native parsing and evaluation of SPIFFE identities in authorization policies. This unlocks precise access control for non-human identities (NHIs) like services, workloads, and containers that rely on SPIFFE-based workload identity.
Insights from Gartner IAM Summit 2025 - Identity, authorization, and the road ahead
The 2025 Gartner Identity and Access Management (IAM) Summit in London brought the identity community face-to-face with the future. From the surge of machine identities to evolving authorization patterns and policy-based control, the event underlined a clear shift: identity and access are no longer just IT plumbing - they're strategic infrastructure.
A non-developerâs guide to authorization APIs
As the digital realm becomes more interconnected and sophisticated, exponentially growing threats make breaches not just a possibility but an impending reality for those not adequately protected. At the heart of this safeguard is not just recognizing who a user is but strictly defining and overseeing what they can and cannot access.This is where Authorization comes into play.
11 best open source tools for Software Architects
Learn about the best open-source tools for software architects, from diagramming and modeling to access control. Discover tools like Graphviz, PlantUML, Mermaid, and Cerbos to enhance system design, collaboration, and security in your software architecture workflows.
Cerbos Prisma integration v2.0: More powerful fine-grained authorization
Latest update to the Cerbos reference Prisma Query Plan Adapter - making it even easier to enforce fine-grained access control within applications using Prisma ORM. In this blog post, weâll explore the new features, use cases enabled, and how you can start using it today.
Add fully featured authorization to your Prisma app
Read this guide and learn how to set up a basic CRM web application using Prisma for data storage and Cerbos for fully featured authorization.
Simple Role-Based Access Control in JavaScript
Learn how to integrate Cerbos into a JavaScript To-Do List application for robust role-based access control (RBAC). This guide covers setting up Cerbos, defining roles and permissions, and best practices for secure and scalable authorization management. Perfect for developers looking to enhance application security with fine-grained access control.
Guide to Kubernetes RBAC
Learn about Kubernetes RBAC, its core objects, and challenges such as scalability, manual management, and auditing. Discover best practices and how Cerbos helps simplify RBAC for Kubernetes, ensuring security and compliance with minimal effort.
Enterprise access control in service-oriented architectures
Choosing the right access control model for your enterprise isn't just a technical decision - itâs a business one. Explore the challenges of role explosion, the advantages of attribute-based access, and how a hybrid approach can simplify authorization while ensuring compliance and security.
Certifications for Enterprise Architects, Domain Solutions Architects, and Software Engineers
Learn if getting a certification is the right option for you, if you are an Enterprise Architect, Domain Solutions Architect, or a Software Engineer. As well as which certification you should go for.
DevWorld 2025 - A dichotomy of open source and enterprise
DevWorld conference - reflecting over the two days of conversations, two camps emerged: the early-stage startup open-source adopters and the massive enterprise organizations. Both groups have similar requirements around fine-grained authorization, but the technology stacks to deliver that within were different.