Externalized, policy-based, runtime authorization for your applications.

Open Source Alternative to:

Repository activity:

Stars3,436

Forks146

Open Issues41

Last commit2 days ago

License:

Apache-2.0

Languages:

Go
Smarty
Shell
Cerbos screenshot

Cerbos is an open-source Policy Decision Point (PDP) that simplifies the implementation and management of user permissions and authorization in your applications. It allows developers to externalize authorization, ensuring fine-grained access control without compromising on speed or security.

  • Fine-grained access control: Implement zero trust runtime access controls to protect your data and systems.
  • Policy-based authorization: Adapt to evolving business needs and regulatory requirements with flexible policies.
  • Centralized management: Govern and audit access control from a central Policy Administration Point.
  • Decentralized decisioning: Deploy distributed Policy Decision Points (PDP) locally alongside applications.
  • Pre-built integrations: Get up and running quickly with SDKs and starter projects for common frameworks.
  • Permissions-aware data filtering: Generate dynamic conditions to query and filter based on access policies.
  • Human-readable policies: Manage policies in configuration instead of code for easier iteration.
  • Policy Playground: Experiment with policies in a safe environment and get real-time simulated results.
  • Audit trails: Capture all actions and decisions made by your Cerbos policies, ensuring compliance with standards like ISO27001 and SOC2.
  • Low-latency: Make decisions locally at runtime in sub-milliseconds without requiring cloud lookups.
  • Flexible deployment models: Self-hosted, compatible with air-gapped environments, and deployable with serverless functions or a sidecar model.

Cerbos provides a robust and scalable solution for managing user permissions and authorization, making it an asset rather than a chore for your development team.

Share: