Cerbos

Cerbos is a self-hosted, open source authorization layer that separates your authZ logic from your core application code.

Cerbos allows for swift and secure set up and modification of complex roles and permissions. Unlike traditional methods that require intricate code manipulation, Cerbos simplifies the process by making changes through configuration. This reduces risks associated with authZ changes, such as downtime or security incidents.

Cerbos' structure, independent from the app code, allows both business stakeholders and non-expert engineers to understand the permissions structure. A broader range of stakeholders can make changes to the authZ logic without needing extensive coding knowledge or risking the stability of the core application.

In an era where authZ logic is business logic, the ability to quickly adapt and scale this element is vital. Cerbos makes this possible, facilitating an agile response to new markets and customer needs while maintaining a mature product.