3 ms·
Show HN: Cerbos. Open source, horizontally scalable, stateless authorization
Cerbos PDP, policy decision point, is an open source authorization layer that can evolve as your product grows. It enables developers to define powerful, context-aware access control in simple, intuitive, and testable policies. Cerbos runs in your own environment.
We started working on Cerbos[0] over 3 years ago. Permission management across applications is difficult, especially as the code base grows: you have hundreds of users, many services in different languages, and several environments. Hardcoded access control rules tangled with business logic make every new role and permission change a hassle to write, test, and maintain.
Cerbos PDP[1], is an open source, self-hosted, and a stateless solution to solve access rule consistency in a scalable manner across the entire code base. It truly scales horizontally and is used by hundreds of companies. Check out how Cerbos works[2].
Cerbos also has a playground[3] which lets you author policies and in real time see their impact in the application you are developing.
I would love to hear your feedback.
PS: We just surpassed 3333 stars!
[0] https://cerbos.dev https://cerbos.dev
[1] https://github.com/cerbos/cerbos https://github.com/cerbos/cerbos
[2] https://cerbos.dev/how-it-works https://cerbos.dev/how-it-works
[3] https://play.cerbos.dev https://play.cerbos.dev
Disclaimer: I am the co-founder of Cerbos.
- popalchemist 2y agoCongrats on 3333, that's awesome and fun. Can it deployed embedded within, say, a node app, or does it require deployment as its own docker image or docker compose stack?
- jonsomfgssafd 2y ago[flagged]
- richald 2y agoDoes it support RBAC or ABAC? Looks cool!
- AnnaPBC 2y agoHey! i'm part of the Cerbos team :) Yes, Cerbos supports both RBAC and ABAC. You can try out a pre-built rbac / abac policy in the Cerbos playground by going here https://www.cerbos.dev/features-benefits-and-use-cases/rbac https://www.cerbos.dev/features-benefits-and-use-cases/rbac and clicking [Try out this pre-built policy in the Cerbos Playground]