Guide
All articles tagged Guide.
How to add authorization to legacy applications without code changes
Learn how to add authorization to legacy applications without modifying a single line of code. This guide covers the gateway pattern with Cerbos Synapse and Envoy, route-level policy enforcement, device posture checks, audit trail coverage, and a phased path from zero visibility to full authorization governance.
5 authorization blind spots auditors find, and how to fix them
A practical guide to the 5 authorization gaps that drive access control audit findings in regulated enterprises. Covers scattered authorization logic, proof of enforcement, role versus permission reviews, non-human identity governance, and AI agent authorization, with concrete steps to fix each one.
Row-level security for Apache Trino, powered by Cerbos Synapse
Add row-level security, column masking, and table-level access control to Apache Trino using Cerbos policies. No Rego, no custom plugins. Covers policy examples, attribute-based filtering from your IdP, per-role masking rules, and compliance audit logging through Cerbos Hub.
AI Security Platforms (AISP): What they are, why they matter, and how they work
AI Security Platforms (AISP) explained. Learn what AISPs are, why they matter, and how they secure AI agents, LLMs, and workflows against prompt injection, data leakage, and rogue behavior with real-world, technical examples.
Top 9 Identity & Access Management (IAM) Tools for 2026
IAM tools are essential for enhancing security, streamlining access management processes, and ensuring compliance in organizations. In this blog, we're going to discuss the top 9 identity and access management (IAM) tools of 2026.
Authelia vs Authentik in 2026: Which self-hosted IdP should you choose
Authelia vs Authentik explained: compare a lightweight forward-auth gateway and a full IdP, when to choose each, security notes. This guide covers MFA, SSO, protocol support, deployment trade-offs, CVE track records, and community insights to help you pick the right fit for your stack.
Can non-engineers manage authorization policies with Cerbos?
How non-engineers manage authorization policies with Cerbos. Product managers, security leads, and even end customers can write and update YAML policies thanks to readable syntax and CEL conditions. Includes Supy's self-service custom roles, Human Managed's five-minute policy changes, and the Git review workflow that keeps changes safe.
Governing AI coding agents with Cerbos Synapse
Learn how to control every tool call with policy, enforce role-based access, and get full audit visibility using Cerbos Synapse
Your AI coding agents need guardrails. Not the kind you think
What can your Claude Code agent do on your machine right now? A deep dive into how to actually control it with real enforcement, policies, and audit visibility.
Mapping business requirements to authorization policy for utilities
Learn how to write and manage authorization policies for utility companies using PBAC. Compare RBAC vs. ABAC across real-world scenarios like SCADA access control, gas sensor policies, compliance audits, and vendor onboarding - with practical YAML and code examples that reduce downtime, cut costs, and simplify operations.
The CISO’s guide to implementing Zero Trust: Making adaptive access control work in practice
Learn how to move Zero Trust from buzzword to reality with adaptive authentication, dynamic authorization, and policy-as-code. This guide covers ABAC, contextual access controls, and a practical maturity roadmap to help CISOs operationalize Zero Trust without overhauling their entire stack.
Automating IAM for compliance, security, and business agility
Learn how to move IAM beyond manual approvals with just-in-time access and policy-based access control (PBAC). Explore practical strategies for automating identity governance, reducing privilege creep, and aligning with zero trust — plus where AI fits and where it doesn't.
Authorization became the main character at Gartner IAM London
Insights from the Gartner Identity & Access Management Summit EMEA: why authorization is becoming core infrastructure for securing AI agents. Learn how Authorization Management Platforms, the AuthZEN authorization protocol, and policy-based access control are shaping the future of identity and runtime authorization.
How does Cerbos help with compliance audits and certifications?
Speed up compliance audits with Cerbos audit logging and policy versioning. Track who accessed what, why decisions were made, and prove authorization controls for SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
Overcoming IAM blind spots and fragmentation for continuous governance
Fragmented IAM creates blind spots, audit chaos, and hidden security risk. Learn why identity sprawl undermines compliance and how continuous governance, policy-as-code, and real-time visibility help CISOs stay audit-ready and reduce identity-related breaches.
Zero Trust in cybersecurity - how it works
Explore how Zero Trust, layered security, and modern authorization strategies protect systems from breaches. Learn why broken access control remains a top risk and how policy-based access strengthens cloud-native applications.
How long does it take to implement Cerbos in production?
Deploy Cerbos authorization in days. Real production examples show teams reaching production in weeks and running checks in under 10 minutes. Learn implementation timelines, factors affecting speed, and how externalized authorization saves months of engineering time and long-term maintenance costs.
When breach becomes personal. CISOs, identity failures and the road to continuous governance
CISOs face personal liability as IAM failures drive costly breaches. Discover how identity governance gaps, privilege creep, deepfake threats, and tool fragmentation create hidden risks - and why continuous, adaptive authorization is essential to building a resilient, audit-ready IAM program in 2026.