
Install the Cerbos PDP on macOS or Linux with a single Homebrew command for local development and testing.
Install Cerbos with a single `brew install` command, no manual downloads or path configuration
Run a full Cerbos PDP on your machine to develop and test authorization policies before deploying
Keep Cerbos up to date with `brew upgrade`, managed alongside your other development tools
Cerbos is an open-source authorization layer that decouples access control from your application code. It runs as a stateless Policy Decision Point (PDP) that evaluates fine-grained policies at request time.
Authorization policies are written in human-readable YAML supporting RBAC, ABAC, and conditional rules. They can be updated, tested, and deployed independently of your application.
Deploying Cerbos via Homebrew gives you a production-ready authorization service that scales horizontally and fits naturally into your existing infrastructure and observability stack.
brew install cerbos/tap/cerbos to install the Cerbos binary from the official Homebrew tap.cerbos server --config=/path/to/config.yaml to start the local policy decision point.Run `brew install cerbos/tap/cerbos` to install the Cerbos binary. Once installed, run `cerbos server` with a policy directory to start the PDP locally.
No. Cerbos is a single static binary with no external dependencies. It requires no database, message queue, or runtime. Just install and run.
Homebrew is ideal for local development and testing. For production deployments, use Docker, Kubernetes with Helm, or a cloud VM with the binary installed directly or managed via systemd.



What is Cerbos?
Cerbos is an end-to-end enterprise authorization software for Zero Trust environments and AI-powered systems. It enforces fine-grained, contextual, and continuous authorization across apps, APIs, AI agents, MCP servers, services, and workloads.
Cerbos consists of an open-source Policy Decision Point, Enforcement Point integrations, and a centrally managed Policy Administration Plane (Cerbos Hub) that coordinates unified policy-based authorization across your architecture. Enforce least privilege & maintain full visibility into access decisions with Cerbos authorization.