---
title: "WebAssembly (WASM) embedded Policy Decision Points"
description: "Cerbos Hub introduces a unique, flexible approach to authorization by leveraging WebAssembly (WASM) for embedded Policy Decision Points (PDPs)."
canonical: "https://www.cerbos.dev/features-benefits-and-use-cases/wasm-embedded-pdp"
source: "https://www.cerbos.dev/features-benefits-and-use-cases/wasm-embedded-pdp"
---

# WebAssembly (WASM) embedded Policy Decision Points

Cerbos Hub introduces a unique, flexible approach to authorization by leveraging WebAssembly (WASM) for embedded Policy Decision Points (PDPs).

## Lightweight and compatible

Take advantage of a stateless and scalable authorization system that seamlessly integrates into your environment. Unlike the standard open source PDP, an embedded PDP can be deployed as a library instead of a service at edge, on client devices and in serverless environments. Cerbos Hub delivers this feature by creating a policy file on CDN, pre-compiled and ready to be loaded into your application, all whilst maintaining the same API as the PDP service.

Since launching embedded PDPs, we have heard consistent feedback from teams using client-side authorization at scale: more control over bundle contents, tenant isolation in multi-tenant applications, security controls for sensitive authorization logic. We have delivered on that feedback with <a href="https://www.cerbos.dev/blog/epdp-rules-fine-grained-control-for-embedded-policy-bundles" target="_blank">ePDP Rules</a> - a new way to configure exactly what policies are served to which clients, with enterprise-grade security built in.

## Advantages of an embedded PDP

* Easier front-end policy checks: The lightweight design lets your application make decisions on UI rendering faster, and without making a call to the backend
* Portability: Usable in serverless environments like Vercel and Netlify. 
* Reduce latency: Process authorization decisions directly on the user's device. Or distribute your authorization logic closer to the user by embedding it at the edge, ensuring rapid response times and reduced central server loads.
* Security and consistency: As Cerbos Hub distributes policies for both the Policy Decision Points (PDPs) and the  WebAssembly modules - any changes to policy are reflected everywhere with no extra work. Ensure a consistent and unified approach to policy enforcement.

## Learn more about stateless and scalable authorization

- [Scalability in authorization](https://www.cerbos.dev/features-benefits-and-use-cases/scalability) — Discover the importance of having an authorization layer which can scale up in both volume and complexity.
- [Stateless authorization](https://www.cerbos.dev/features-benefits-and-use-cases/stateless-authorization) — Ensure real-time access decisions without the overhead of managing application states.
- [Decoupling authorization](https://www.cerbos.dev/features-benefits-and-use-cases/decoupled-authorization) — Simplify authorization, restoring clarity and control to development teams.
- [Fine-grained control for embedded policy bundles with ePDP Rules](https://www.cerbos.dev/blog/epdp-rules-fine-grained-control-for-embedded-policy-bundles) — A new way to configure exactly what policies are served to which clients, with enterprise-grade security built in.
- [Where to implement authorization in your architecture](https://youtu.be/03XgWf_7dzI) — Find out more in the following video.
- [How do we distribute Cerbos](https://youtu.be/Rvw0DTTQmSw) — Find out more in the following video.
- [Community discussions on ABAC](https://community.cerbos.dev/?_gl=1*5ozo82*_ga*MTk1NjcwNzQ1MC4xNjY2Mjc5NjI2*_ga_8G3G3MS838*MTY5NDE5MTE5Ny41MjcuMS4xNjk0MTkyNzgyLjIwLjAuMA) — Join the conversation and learn from the experiences of other Cerbos users