Guide
All articles tagged Guide.

Rescuing and securing unstructured data with RAG
How Retrieval Augmented Generation (RAG) combined with Large Language Models (LLMs) are changing the way companies access and secure unstructured data.

Introducing updates to Cerbos PDP
Cerbos PDP, a policy decision point, is an authorization layer that can evolve as your product grows. It enables developers to define powerful, context-aware access control in simple, intuitive, and testable policies.

The value of monitoring and observability in microservices, and associated challenges
Learn how monitoring and observability is crucial in maintaining overall system health and performance in distributed environments of microservices.

Designing service discovery and load balancing in a microservices architecture
Explore how service discovery and load balancing play crucial roles in microservices for dynamic communication and connection between multiple services.

SaaS user management - things to consider
In this blog, we’ll dive into everything you need to consider when working on SaaS user management. You’ll learn why managing user access is essential, how different access control models like RBAC and ABAC work, and the key benefits of a well-structured user management strategy.

Using Cerbos with Supabase
Learn how to seamlessly integrate Supabase authentication with Cerbos authorization to create a secure, scalable backend. This guide covers setup, user creation, policy definition, and testing, ensuring robust access control without complex code. Perfect for developers seeking efficient, maintainable auth solutions.

How to pick the right inter-service communication pattern for your microservices
Learn how to pick the right inter-service communication pattern for your microservices. Discover the role of communication protocols and patterns in microservices for efficient inter-service data exchange that offers seamless functionality for end-users.

Access control for RAG and LLMs - live demo
Get insights into RAG architecture, its security challenges, and how Cerbos ensures secure and efficient access control. If you're looking for ways to install guardrails around your AI systems - read on.

What is IAM - Identity and access management?
Learn what modern Identity and Access Management (IAM) looks like. You’ll learn what IAM is, what the components are, and how they intersect to support different security needs. By the end, you'll know how to choose and implement access management practices that safeguard systems, without compromising on user experience.
How to address decentralized data management in microservices
Learn how decentralized data management is crucial in microservices for maintaining consistency and integrity across services.

Granular permission control - do organizations need it?
Granular permission control empowers organizations to manage access with precision, reducing security risks and ensuring compliance. By defining who can access what, and under which conditions, companies safeguard sensitive data and streamline operations. Learn why granular permissions are essential for robust security and effective role management.

Determining service boundaries and decomposing your monolith
The first major hurdle when decomposing a monolith app is defining appropriate boundaries for each microservice. We’ll cover how to break down a monolithic app into smaller, independently deployable services that align with business capabilities.

Why granular, scalable control is a must for every CTO
Fine-grained authorization and access control in modern applications - learn how to transition from basic RBAC to ABAC using externalized authorization. Discover best practices for implementing scalable permission systems in microservices architectures, ensuring compliance, and managing technical debt through policy-driven security approaches.

Easy way to put user role in JWT
Learn about embedding user roles in JWTs for managing access control in your applications. Use the technique described in this article with care. If you end up abusing this method, you'll fall into the bloated JWT anti-pattern.

Using Cerbos authorization with JSON Web Tokens
Learn how to implement Cerbos authorization in JWT, in a JavaScript application using Next.js. This guide demonstrates combining JSON Web Tokens for secure authentication and Cerbos' policy-based engine for robust authorization, enabling simple access control management for your APIs.

Why you need to think about both your security and users when implementing authorization
Explore how a finely-tuned authorization system balances security and user experience, ensuring compliance with global regulations like GDPR and CCPA. Learn strategies to design scalable, user-friendly permissions that align with business goals, enhance customer trust, and meet enterprise needs without compromising cybersecurity.

How to implement authorization in React JS
In this blog, we will learn how to implement an authorization mechanism in ReactJS applications using Cerbos.

PBAC vs. Zanzibar: Finding The Right Fit For Your Application
Discover the key differences between PBAC and Zanzibar to find the ideal authorization solution for your application. Learn how PBAC with Cerbos offers a flexible, scalable access control solution, while Zanzibar excels in centralized, fine-grained management for static resources. Find the right fit for your needs.