Lightweight and compatible

Take advantage of a stateless and scalable authorization system that seamlessly integrates into your environment. Unlike the standard open source PDP, an embedded PDP can be deployed as a library instead of a service at edge, on client devices and in serverless environments. Cerbos Hub delivers this feature by creating a policy file on CDN, pre-compiled and ready to be loaded into your application, all whilst maintaining the same API as the PDP service.

Since launching embedded PDPs, we have heard consistent feedback from teams using client-side authorization at scale: more control over bundle contents, tenant isolation in multi-tenant applications, security controls for sensitive authorization logic. We have delivered on that feedback with ePDP Rules - a new way to configure exactly what policies are served to which clients, with enterprise-grade security built in.

Advantages of an embedded PDP

• Easier front-end policy checks: The lightweight design lets your application make decisions on UI rendering faster, and without making a call to the backend
• Portability: Usable in serverless environments like Vercel and Netlify.
• Reduce latency: Process authorization decisions directly on the user's device. Or distribute your authorization logic closer to the user by embedding it at the edge, ensuring rapid response times and reduced central server loads.
• Security and consistency: As Cerbos Hub distributes policies for both the Policy Decision Points (PDPs) and the WebAssembly modules - any changes to policy are reflected everywhere with no extra work. Ensure a consistent and unified approach to policy enforcement.