Cerbos
Centralized policy management for contextual access control across applications, gateways, workloads, and AI systems. Enforce security and compliance without scattered code.
Cerbos is an open-source alternative to:
Cerbos is an authorization management platform that provides end-to-end access control for Zero Trust environments and AI systems. It enables teams to enforce fine-grained, contextual, and continuous authorization policies across all layers of software.
Key Features
- Centralized Policy Management: Define, approve, and update authorization policies in one place, replacing scattered if-statements with a single function call.
- Multi-Identity Support: Govern access for users, service accounts, non-human identities (NHIs), and AI agents through unified policies.
- Real-Time Authorization: Enforce policies at runtime with instant decision logging for compliance audits (SOC 2, ISO 27001, HIPAA, GDPR, NIS2, DORA, FedRAMP).
- AI Agent Security: Define and revoke access boundaries for AI agents and MCP tools before deployment, ensuring secure operations.
- Scalable Architecture: Handle millions of authorization decisions per second across distributed systems and AI workloads with stateless deployments.
- Policy Models: Support for RBAC, ABAC, ReBAC, and PBAC out of the box.
- Deployment Flexibility: Deploy in cloud, on-premises, or air-gapped environments to match your infrastructure needs.
- IAM Integration: Close gaps in your identity stack by integrating with IdPs for authentication and IGA for role provisioning.
Tech / Self-Hosting
Cerbos is open-source and can be self-hosted in various environments including cloud, on-premises, or air-gapped setups. The platform is designed for high availability and scalability, making it suitable for enterprise-grade deployments. Comprehensive documentation and support are available for self-hosting configurations.