corpus.blog
56,966 blogs · [ { "id": "01a0d791-af82-728f-ba9b-96896e460e4f", "title": "Cerbos named a Sample Vendor for AuthZEN in the Gartner® Hype Cycle™ for Digital Identity, 2026", "url": "https://cerbos.dev/blog/cerbos-named-sample-vendor-authzen-gartner-hype-cycle-for-digital-identity", "published_at": "2026-09-16T14:23:12+00:00" }, { "id": "01a0d791-af82-728f-ba9b-96896e61fda4", "title": "Rich Authorization Requests (RAR) for agent tokens", "url": "https://cerbos.dev/blog/rich-authorization-requests-agent-tokens", "published_at": "2026-09-16T09:17:30+00:00" }, { "id": "01a0d791-af82-728f-ba9b-96896f4ce7f8", "title": "The Cerbos PDP dashboard is now on Grafana Cloud", "url": "https://cerbos.dev/blog/cerbos-pdp-dashboard-on-grafana-cloud", "published_at": "2026-09-15T08:28:07+00:00" }, { "id": "01a0d791-af82-728f-ba9b-96896fead198", "title": "Best zero trust security tools and solutions for 2026", "url": "https://cerbos.dev/blog/best-zero-trust-security-tools-solutions", "published_at": "2026-09-12T11:21:00+00:00" }, { "id": "01a094e2-9486-7132-abd7-738c7c9dcbde", "title": "Why your audit trail breaks at the sub-agent boundary", "url": "https://cerbos.dev/blog/audit-trail-sub-agent-boundary", "published_at": "2026-09-11T10:15:22+00:00" }, { "id": "01a08c87-d505-71e9-9d99-f10af38d1ba6", "title": "Keycloak vs Ory", "url": "https://cerbos.dev/blog/keycloak-vs-ory", "published_at": "2026-09-10T10:56:00+00:00" }, { "id": "01a0875d-b738-71a5-823b-4611f2d6662f", "title": "LDAP and Active Directory authorization without changing the application", "url": "https://cerbos.dev/blog/ldap-active-directory-authorization-without-changing-application", "published_at": "2026-09-09T12:37:27+00:00" }, { "id": "01a08215-c68f-72e4-a81b-68cb18e7dbb7", "title": "Cerbos Hub has a new interface", "url": "https://cerbos.dev/blog/cerbos-hub-has-a-new-interface", "published_at": "2026-09-08T12:11:53+00:00" }, { "id": "01a08215-c68f-72e4-a81b-68cb196d882a", "title": "Identity Week America 2026: Same AI agent authorization problem, different badges", "url": "https://cerbos.dev/blog/identity-week-america-2026", "published_at": "2026-09-07T11:10:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-051398433249", "title": "Per-hop PBAC: enforcing scope at every delegation step", "url": "https://cerbos.dev/blog/per-hop-pbac-delegation", "published_at": "2026-09-04T13:44:16+00:00" }, { "id": "01a07df2-392b-7397-89dc-051398468a02", "title": "Best Keycloak alternatives", "url": "https://cerbos.dev/blog/best-keycloak-alternatives", "published_at": "2026-09-02T16:02:16+00:00" }, { "id": "01a07df2-392b-7397-89dc-051398a49018", "title": "Best AI agent security and governance tools for 2026", "url": "https://cerbos.dev/blog/best-ai-agent-security-and-governance-tools", "published_at": "2026-09-01T10:33:55+00:00" }, { "id": "01a07df2-392b-7397-89dc-051399879b02", "title": "Multi-hop delegation for AI agents, and how the consent chain gets lost", "url": "https://cerbos.dev/blog/multi-hop-delegation-ai-agents", "published_at": "2026-08-28T09:31:52+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139a090356", "title": "Kubernetes admission control does not need a second policy language", "url": "https://cerbos.dev/blog/kubernetes-admission-control-does-not-need-a-second-policy-language", "published_at": "2026-08-27T16:19:09+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139a5bc58b", "title": "Not every authorization decision is allow or deny", "url": "https://cerbos.dev/blog/not-every-authorization-decision-is-allow-or-deny", "published_at": "2026-08-26T10:14:01+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139afa3d69", "title": "What is authorization? Types, examples and definitions", "url": "https://cerbos.dev/blog/what-is-authorization", "published_at": "2026-08-25T08:36:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139b54aceb", "title": "Istio authorization stops at identity, not at what a workload may do", "url": "https://cerbos.dev/blog/istio-authorization-stops-at-identity", "published_at": "2026-08-24T12:02:09+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139ba572ba", "title": "Stale JWT claims in authorization, and how to look up identity attributes at decision time", "url": "https://cerbos.dev/blog/how-to-look-up-identity-attributes-at-decision-time", "published_at": "2026-08-21T14:22:26+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139bf6592f", "title": "Policy-driven MCP routing: enforcing tool gates outside the agent", "url": "https://cerbos.dev/blog/policy-driven-mcp-routing-tool-gating", "published_at": "2026-08-19T09:19:29+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139cbdec7c", "title": "Full guide to Next.js authorization & authentication", "url": "https://cerbos.dev/blog/next-js-authorization", "published_at": "2026-08-18T14:26:53+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139cf16312", "title": "Open source Cerbos vs paid Cerbos", "url": "https://cerbos.dev/blog/open-source-vs-paid-cerbos", "published_at": "2026-08-18T13:09:04+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139d33e268", "title": "Delegated authorization: Why acting on behalf of someone else is not a role", "url": "https://cerbos.dev/blog/delegated-authorization", "published_at": "2026-08-17T15:12:38+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139db6babf", "title": "MCP server vetting checklist for enterprises", "url": "https://cerbos.dev/blog/mcp-server-vetting-checklist", "published_at": "2026-08-16T09:24:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139dd53045", "title": "Authorizing MCP tool calls at the gateway or inside the proxy, and what each one stops", "url": "https://cerbos.dev/blog/authorizing-mcp-tool-calls-at-the-gateway-or-inside-the-proxy", "published_at": "2026-08-15T10:57:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139eb6b1e1", "title": "Envoy ext_authz: enforcing one authorization policy at the gateway and in the service", "url": "https://cerbos.dev/blog/envoy-ext-authz-enforcing-one-authorization-policy-at-gateway-in-service", "published_at": "2026-08-14T14:58:16+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139ee1efbe", "title": "Cerbos PDP v0.55.0: Strict evaluation mode, multiple JWTs, and faster conditions", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-55-0-strict-evaluation-mode-multiple-jwts-faster-conditions", "published_at": "2026-08-13T09:36:19+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139f04ff1c", "title": "What's new in Cerbos Hub: audit log exports and a playground that tells you what's wrong", "url": "https://cerbos.dev/blog/cerbos-hub-audit-log-exports-and-a-playground-that-tells-you-what-s-wrong", "published_at": "2026-08-12T10:16:18+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139f78f665", "title": "MCP authorization standards: OAuth scopes, AuthZEN, and what's still missing", "url": "https://cerbos.dev/blog/mcp-authorization-standards", "published_at": "2026-08-11T09:25:01+00:00" }, { "id": "01a07df2-392b-7397-89dc-05139ff63366", "title": "Mapping business requirements to authorization policy", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy", "published_at": "2026-08-09T11:12:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a0cc6b3c", "title": "What is an MCP gateway? And where authorization actually fits", "url": "https://cerbos.dev/blog/what-is-an-mcp-gateway", "published_at": "2026-08-08T09:13:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a0ec65f0", "title": "Mapping business requirements to authorization policy for gaming", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-gaming", "published_at": "2026-08-07T11:56:22+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a1639505", "title": "Cerbos security and trust: Data handling, certifications, and deployment isolation", "url": "https://cerbos.dev/blog/cerbos-security-and-trust", "published_at": "2026-08-06T11:26:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a1b05461", "title": "Framework for evaluating authorization providers and solutions", "url": "https://cerbos.dev/blog/framework-evaluating-authorization-providers-solutions", "published_at": "2026-08-05T16:10:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a2529497", "title": "Best OpenZiti alternatives", "url": "https://cerbos.dev/blog/openziti-alternatives", "published_at": "2026-08-05T10:51:50+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a326bb2f", "title": "Your IdP proves who an AI agent is. DORA expects you to control what it does", "url": "https://cerbos.dev/blog/dora-control-what-ai-agents-do", "published_at": "2026-08-03T10:12:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a3669733", "title": "Authentik vs Zitadel for authentication", "url": "https://cerbos.dev/blog/authentik-vs-zitadel", "published_at": "2026-07-28T14:01:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a3f99a1e", "title": "You have Keycloak. What authorization capabilities do you still need?", "url": "https://cerbos.dev/blog/you-have-keycloak-what-authorization-capabilities-do-you-still-need", "published_at": "2026-07-24T13:42:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a477188b", "title": "The kill switch that never got pressed: what the OpenAI–Hugging Face incident tells us about agent authorization", "url": "https://cerbos.dev/blog/the-kill-switch-that-never-got-pressed-what-the-open-ai-hugging-face-incident-tells-us-about-agent-authorization", "published_at": "2026-07-22T11:08:22+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a4b6bb5f", "title": "Claude Fable 5 and GPT-5.6 Sol authorization refusals", "url": "https://cerbos.dev/blog/claude-fable-5-and-gpt-5-6-sol-authorization-refusals", "published_at": "2026-07-21T11:25:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a590376d", "title": "Agent skill for writing authorization policies in VSCode", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-vs-code", "published_at": "2026-07-20T14:02:45+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a62a5cf2", "title": "Cerbos PDP v0.54.0: Faster evaluations, lower memory usage, and new store diagnostics", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-54-0-faster-evaluations-lower-memory-usage-and-new-store-diagnostics", "published_at": "2026-07-20T13:16:32+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a6dff457", "title": "Agent skill for writing authorization policies in Cursor", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-cursor", "published_at": "2026-07-19T13:54:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a771189e", "title": "Authorization in microservices: Patterns, pitfalls, and how to scale it", "url": "https://cerbos.dev/blog/tips-for-microservices-authorization", "published_at": "2026-07-15T22:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a7f71f09", "title": "Ory vs SuperTokens for authentication", "url": "https://cerbos.dev/blog/ory-vs-supertokens", "published_at": "2026-07-15T13:20:44+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a87977ca", "title": "RBAC vs ABAC - Which is better for your use case?", "url": "https://cerbos.dev/blog/rbac-vs-abac", "published_at": "2026-07-13T22:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a93d831d", "title": "The incident response workflow that decides how fast you recover", "url": "https://cerbos.dev/blog/incident-response-authorization-workflow", "published_at": "2026-07-13T12:23:55+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513a956c2d9", "title": "Agent skill for writing authorization policies in Codex CLI", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-codex-cli", "published_at": "2026-07-12T14:07:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513aa51b7ac", "title": "ABAC examples: Real attribute-based access control policies and use cases", "url": "https://cerbos.dev/blog/abac", "published_at": "2026-07-10T22:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513aaba9288", "title": "You have Auth0. What authorization capabilities do you still need?", "url": "https://cerbos.dev/blog/you-have-auth0-what-authorization-capabilities-do-you-still-need", "published_at": "2026-07-10T13:46:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513aacccdb7", "title": "Automating Cerbos Policy deployments with CircleCI", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-circleci", "published_at": "2026-07-09T10:34:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ab47e818", "title": "Automating Cerbos Policy deployments with Azure DevOps Pipelines", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-azure-devops-pipelines", "published_at": "2026-07-08T10:36:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ac1c71dc", "title": "Automating Cerbos Policy deployments with BitBucket Pipelines", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-bitbucket-pipelines", "published_at": "2026-07-08T10:33:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ad19edf3", "title": "Automating Cerbos Policy deployments with GitLab Runners", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-gitlab-runners", "published_at": "2026-07-08T10:30:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513adf0c3ed", "title": "What is fine-grained authorization?", "url": "https://cerbos.dev/blog/what-is-fine-grained-authorization", "published_at": "2026-07-07T22:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ae80d7de", "title": "Agent skill for writing authorization policies in OpenCode", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-open-code", "published_at": "2026-07-07T14:11:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513af1179c6", "title": "Automating Cerbos Policy deployments with Buildkite", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-buildkite", "published_at": "2026-07-07T10:32:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513af3a31a5", "title": "The authorization POC guide: What to test, who to involve, and how to decide", "url": "https://cerbos.dev/blog/authorization-poc-guide", "published_at": "2026-07-06T10:09:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b017fbe7", "title": "Automating Cerbos Policy deployments with GitHub Actions", "url": "https://cerbos.dev/blog/automating-cerbos-policy-deployments-with-github-actions", "published_at": "2026-07-05T10:38:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b01b8b2d", "title": "Agent skill for writing authorization policies in Pi", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-pi", "published_at": "2026-07-02T13:19:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b07ab152", "title": "You have Okta. What authorization capabilities do you still need?", "url": "https://cerbos.dev/blog/you-have-okta-what-authorization-capabilities-do-you-still-need", "published_at": "2026-07-01T13:13:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b16f71ad", "title": "Mastering hierarchy-based permissions with Cerbos: Policy-defined roles vs. dynamic attributes", "url": "https://cerbos.dev/blog/mastering-hierarchy-based-permissions-with-cerbos-policy-defined-roles-vs-dynamic-attributes", "published_at": "2026-06-30T14:04:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b1933b61", "title": "The Cerbos Hub effect matrix: read your authorization policy at a glance", "url": "https://cerbos.dev/blog/cerbos-hub-effect-matrix-read-authorization-policy-at-a-glance", "published_at": "2026-06-30T11:01:14+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b1eacd8b", "title": "Agent skill for writing authorization policies in AWS Kiro", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-aws-kiro", "published_at": "2026-06-26T13:27:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b2af4ae8", "title": "5 factors to weigh when building authorization architecture", "url": "https://cerbos.dev/blog/5-factors-to-weigh-when-building-authorization-architecture", "published_at": "2026-06-25T11:40:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b38e2180", "title": "Fine grained access control: What it actually takes to get it right", "url": "https://cerbos.dev/blog/fine-grained-access-control-get-it-right", "published_at": "2026-06-25T10:03:29+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b477ffec", "title": "Identiverse 2026: Agents made authorization the story", "url": "https://cerbos.dev/blog/identiverse-2026", "published_at": "2026-06-24T12:14:42+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b5111ea8", "title": "Authentication vs Authorization", "url": "https://cerbos.dev/blog/authentication-vs-authorization", "published_at": "2026-06-19T11:20:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b56394ff", "title": "Agent skill for building Cerbos Synapse extensions", "url": "https://cerbos.dev/blog/agent-skill-for-building-cerbos-synapse-extensions", "published_at": "2026-06-18T09:49:39+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b62cf164", "title": "Keycloak vs ZITADEL for self hosted IAM", "url": "https://cerbos.dev/blog/keycloak-vs-zitadel", "published_at": "2026-06-17T10:28:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b6f1ebe7", "title": "Mapping business requirements to authorization policy for e-commerce", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-ecommerce", "published_at": "2026-06-15T11:00:06+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b79b6831", "title": "How to secure microservices without creating a distributed nightmare", "url": "https://cerbos.dev/blog/how-to-secure-microservices-without-creating-a-distributed-nightmare", "published_at": "2026-06-14T10:15:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b7dc4a84", "title": "Governing AI agents at the gateway with Cerbos and agentgateway", "url": "https://cerbos.dev/blog/governing-ai-agents-at-the-gateway-with-cerbos-and-agentgateway", "published_at": "2026-06-10T18:05:24+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b8b391df", "title": "How to secure AI agents and MCP tools at the gateway with LiteLLM and Cerbos", "url": "https://cerbos.dev/blog/secure-ai-agents-mcp-tools-at-the-gateway-lite-llm-cerbos", "published_at": "2026-06-09T10:18:01+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513b99ebce7", "title": "Introducing Cerbos Hub Insights: A live view of what your authorization layer is doing", "url": "https://cerbos.dev/blog/cerbos-hub-insights-live-view-of-what-your-authorization-layer-is-doing", "published_at": "2026-06-08T14:56:53+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ba3d0b60", "title": "AuthZEN wins Outstanding Project Recognition at EIC 2026", "url": "https://cerbos.dev/blog/auth-zen-wins-outstanding-project-recognition-at-eic-2026", "published_at": "2026-06-05T14:56:22+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ba83426d", "title": "Choosing the right deployment model for enterprise authorization", "url": "https://cerbos.dev/blog/choosing-the-right-deployment-model-for-enterprise-authorization", "published_at": "2026-06-05T13:40:39+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bb04a42d", "title": "The Meta AI hack shows why agents shouldn't decide access", "url": "https://cerbos.dev/blog/meta-ai-hack-shows-why-agents-shouldnt-decide-access", "published_at": "2026-06-03T10:03:54+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bbf3ee70", "title": "Agent skill for writing authorization policies in Claude Code", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-claude-code", "published_at": "2026-06-02T10:24:05+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bc535b2c", "title": "Authorization for AI agents: What to build before the EU AI Act deadline", "url": "https://cerbos.dev/blog/authorization-for-ai-agents-what-to-build-before-eu-ai-act-deadline", "published_at": "2026-06-01T12:18:33+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bd4f6bc2", "title": "Authentik vs Keycloak: Self-hosted IdP comparison", "url": "https://cerbos.dev/blog/authentik-vs-keycloak-selfhosted-idp-comparison", "published_at": "2026-05-28T18:59:07+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bdd8fda2", "title": "Mapping business requirements to authorization policy for automotive", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-automotive", "published_at": "2026-05-27T11:06:44+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513be76be54", "title": "Fine-grained authorization for AI gateways", "url": "https://cerbos.dev/blog/fine-grained-authorization-for-ai-gateways", "published_at": "2026-05-26T14:53:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513bf495ce9", "title": "EIC 2026: Stop counting agents, protect what they can touch", "url": "https://cerbos.dev/blog/eic-2026-protect-what-agents-can-touch", "published_at": "2026-05-26T13:13:28+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c00cdfc5", "title": "Agent skill for writing authorization policies in Claude Desktop", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies-in-claude-desktop", "published_at": "2026-05-25T09:30:52+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c089d325", "title": "Identity security in 2026", "url": "https://cerbos.dev/blog/identity-security", "published_at": "2026-05-21T17:21:47+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c133f6eb", "title": "EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents", "url": "https://cerbos.dev/blog/eic-identity-stack-built-for-humans-is-not-going-to-hold-up-for-agents", "published_at": "2026-05-21T08:26:58+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c20f5233", "title": "Query plan adapter for Elasticsearch (Java)", "url": "https://cerbos.dev/blog/query-plan-adapter-for-elasticsearch-java", "published_at": "2026-05-20T11:44:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c2b6f8bc", "title": "Already have authentication? Here's the authorization layer you still need.", "url": "https://cerbos.dev/blog/already-have-authentication-heres-the-authorization-layer-you-still-need", "published_at": "2026-05-20T09:58:47+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c2fbf4ee", "title": "How much does it cost to build authorization in-house?", "url": "https://cerbos.dev/blog/how-much-does-it-cost-to-build-authorization-in-house", "published_at": "2026-05-19T17:20:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c3b6bcb5", "title": "Integrating Cerbos with Kong: A how-to guide for API gateway authorization", "url": "https://cerbos.dev/blog/kong-api-gateway-authorization", "published_at": "2026-05-19T15:34:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c41096ca", "title": "Tokens are authorization decisions: a guide to policy-driven token issuance", "url": "https://cerbos.dev/blog/tokens-are-authorization-decisions-a-guide-to-policy-driven-token-issuance", "published_at": "2026-05-19T11:45:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c5089366", "title": "Query plan adapter for Convex", "url": "https://cerbos.dev/blog/query-plan-adapter-for-convex", "published_at": "2026-05-18T13:43:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c53c4b83", "title": "What is a Runtime Authorization Platform", "url": "https://cerbos.dev/blog/what-is-a-runtime-authorization-platform", "published_at": "2026-05-18T10:37:20+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c5d42a2b", "title": "It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governance", "url": "https://cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance", "published_at": "2026-05-14T12:40:48+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c5db0b8f", "title": "Query plan adapter for Drizzle ORM", "url": "https://cerbos.dev/blog/query-plan-adapter-for-drizzle-orm", "published_at": "2026-05-14T11:34:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c696f9ed", "title": "From maps to bitmaps (and from bitmaps to bitmaps)", "url": "https://cerbos.dev/blog/from-maps-to-bitmaps-and-from-bitmaps-to-bitmaps", "published_at": "2026-05-13T12:47:17+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c71cff33", "title": "Query plan adapter for LangChain.js and ChromaDB", "url": "https://cerbos.dev/blog/query-plan-adapter-for-langchainjs-and-chromadb", "published_at": "2026-05-12T11:01:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c750abcc", "title": "AuthZEN, Shared Signals, SCIM Events, IPSIE: Notes from the OpenID Enterprise Panel", "url": "https://cerbos.dev/blog/authzen-shared-signals-scim-events-ipsie", "published_at": "2026-05-11T09:48:39+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c829e2e2", "title": "How do you update authorization policies without redeploying your application?", "url": "https://cerbos.dev/blog/update-authorization-policies-without-redeploying-your-application", "published_at": "2026-05-08T17:14:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c8c13591", "title": "IIW42 recap: Where agent authorization got real", "url": "https://cerbos.dev/blog/iiw42-recap-agent-authorization-got-real", "published_at": "2026-05-07T09:21:15+00:00" } ] posts Claim your blog
Back to Cerbos Blog
Blog · corpus.blog/blogs/cerbos.dev/posts

Cerbos Blog

cerbos.dev

2026

Cerbos named a Sample Vendor for AuthZEN in the Gartner® Hype Cycle™ for Digital Identity, 2026original ↗
16 Sept 2026
Rich Authorization Requests (RAR) for agent tokensoriginal ↗
16 Sept 2026
The Cerbos PDP dashboard is now on Grafana Cloudoriginal ↗
15 Sept 2026
Best zero trust security tools and solutions for 2026original ↗
12 Sept 2026
Why your audit trail breaks at the sub-agent boundaryoriginal ↗
11 Sept 2026
Keycloak vs Oryoriginal ↗
10 Sept 2026
LDAP and Active Directory authorization without changing the applicationoriginal ↗
9 Sept 2026
Cerbos Hub has a new interfaceoriginal ↗
8 Sept 2026
Identity Week America 2026: Same AI agent authorization problem, different badgesoriginal ↗
7 Sept 2026
Per-hop PBAC: enforcing scope at every delegation steporiginal ↗
4 Sept 2026
Best Keycloak alternativesoriginal ↗
2 Sept 2026
Best AI agent security and governance tools for 2026original ↗
1 Sept 2026
Multi-hop delegation for AI agents, and how the consent chain gets lostoriginal ↗
28 Aug 2026
Kubernetes admission control does not need a second policy languageoriginal ↗
27 Aug 2026
Not every authorization decision is allow or denyoriginal ↗
26 Aug 2026
What is authorization? Types, examples and definitionsoriginal ↗
25 Aug 2026
Istio authorization stops at identity, not at what a workload may dooriginal ↗
24 Aug 2026
Stale JWT claims in authorization, and how to look up identity attributes at decision timeoriginal ↗
21 Aug 2026
Policy-driven MCP routing: enforcing tool gates outside the agentoriginal ↗
19 Aug 2026
Full guide to Next.js authorization & authenticationoriginal ↗
18 Aug 2026
Open source Cerbos vs paid Cerbosoriginal ↗
18 Aug 2026
Delegated authorization: Why acting on behalf of someone else is not a roleoriginal ↗
17 Aug 2026
MCP server vetting checklist for enterprisesoriginal ↗
16 Aug 2026
Authorizing MCP tool calls at the gateway or inside the proxy, and what each one stopsoriginal ↗
15 Aug 2026
Envoy ext_authz: enforcing one authorization policy at the gateway and in the serviceoriginal ↗
14 Aug 2026
Cerbos PDP v0.55.0: Strict evaluation mode, multiple JWTs, and faster conditionsoriginal ↗
13 Aug 2026
What's new in Cerbos Hub: audit log exports and a playground that tells you what's wrongoriginal ↗
12 Aug 2026
MCP authorization standards: OAuth scopes, AuthZEN, and what's still missingoriginal ↗
11 Aug 2026
Mapping business requirements to authorization policyoriginal ↗
9 Aug 2026
What is an MCP gateway? And where authorization actually fitsoriginal ↗
8 Aug 2026
Mapping business requirements to authorization policy for gamingoriginal ↗
7 Aug 2026
Cerbos security and trust: Data handling, certifications, and deployment isolationoriginal ↗
6 Aug 2026
Framework for evaluating authorization providers and solutionsoriginal ↗
5 Aug 2026
Best OpenZiti alternativesoriginal ↗
5 Aug 2026
Your IdP proves who an AI agent is. DORA expects you to control what it doesoriginal ↗
3 Aug 2026
Authentik vs Zitadel for authenticationoriginal ↗
28 Jul 2026
You have Keycloak. What authorization capabilities do you still need?original ↗
24 Jul 2026
The kill switch that never got pressed: what the OpenAI–Hugging Face incident tells us about agent authorizationoriginal ↗
22 Jul 2026
Claude Fable 5 and GPT-5.6 Sol authorization refusalsoriginal ↗
21 Jul 2026
Agent skill for writing authorization policies in VSCodeoriginal ↗
20 Jul 2026
Cerbos PDP v0.54.0: Faster evaluations, lower memory usage, and new store diagnosticsoriginal ↗
20 Jul 2026
Agent skill for writing authorization policies in Cursororiginal ↗
19 Jul 2026
Authorization in microservices: Patterns, pitfalls, and how to scale itoriginal ↗
15 Jul 2026
Ory vs SuperTokens for authenticationoriginal ↗
15 Jul 2026
RBAC vs ABAC - Which is better for your use case?original ↗
13 Jul 2026
The incident response workflow that decides how fast you recoveroriginal ↗
13 Jul 2026
Agent skill for writing authorization policies in Codex CLIoriginal ↗
12 Jul 2026
ABAC examples: Real attribute-based access control policies and use casesoriginal ↗
10 Jul 2026
You have Auth0. What authorization capabilities do you still need?original ↗
10 Jul 2026
Automating Cerbos Policy deployments with CircleCIoriginal ↗
9 Jul 2026
Automating Cerbos Policy deployments with Azure DevOps Pipelinesoriginal ↗
8 Jul 2026
Automating Cerbos Policy deployments with BitBucket Pipelinesoriginal ↗
8 Jul 2026
Automating Cerbos Policy deployments with GitLab Runnersoriginal ↗
8 Jul 2026
What is fine-grained authorization?original ↗
7 Jul 2026
Agent skill for writing authorization policies in OpenCodeoriginal ↗
7 Jul 2026
Automating Cerbos Policy deployments with Buildkiteoriginal ↗
7 Jul 2026
The authorization POC guide: What to test, who to involve, and how to decideoriginal ↗
6 Jul 2026
Automating Cerbos Policy deployments with GitHub Actionsoriginal ↗
5 Jul 2026
Agent skill for writing authorization policies in Pioriginal ↗
2 Jul 2026
You have Okta. What authorization capabilities do you still need?original ↗
1 Jul 2026
Mastering hierarchy-based permissions with Cerbos: Policy-defined roles vs. dynamic attributesoriginal ↗
30 Jun 2026
The Cerbos Hub effect matrix: read your authorization policy at a glanceoriginal ↗
30 Jun 2026
Agent skill for writing authorization policies in AWS Kirooriginal ↗
26 Jun 2026
5 factors to weigh when building authorization architectureoriginal ↗
25 Jun 2026
Fine grained access control: What it actually takes to get it rightoriginal ↗
25 Jun 2026
Identiverse 2026: Agents made authorization the storyoriginal ↗
24 Jun 2026
Authentication vs Authorizationoriginal ↗
19 Jun 2026
Agent skill for building Cerbos Synapse extensionsoriginal ↗
18 Jun 2026
Keycloak vs ZITADEL for self hosted IAMoriginal ↗
17 Jun 2026
Mapping business requirements to authorization policy for e-commerceoriginal ↗
15 Jun 2026
How to secure microservices without creating a distributed nightmareoriginal ↗
14 Jun 2026
Governing AI agents at the gateway with Cerbos and agentgatewayoriginal ↗
10 Jun 2026
How to secure AI agents and MCP tools at the gateway with LiteLLM and Cerbosoriginal ↗
9 Jun 2026
Introducing Cerbos Hub Insights: A live view of what your authorization layer is doingoriginal ↗
8 Jun 2026
AuthZEN wins Outstanding Project Recognition at EIC 2026original ↗
5 Jun 2026
Choosing the right deployment model for enterprise authorizationoriginal ↗
5 Jun 2026
The Meta AI hack shows why agents shouldn't decide accessoriginal ↗
3 Jun 2026
Agent skill for writing authorization policies in Claude Codeoriginal ↗
2 Jun 2026
Authorization for AI agents: What to build before the EU AI Act deadlineoriginal ↗
1 Jun 2026
Authentik vs Keycloak: Self-hosted IdP comparisonoriginal ↗
28 May 2026
Mapping business requirements to authorization policy for automotiveoriginal ↗
27 May 2026
Fine-grained authorization for AI gatewaysoriginal ↗
26 May 2026
EIC 2026: Stop counting agents, protect what they can touchoriginal ↗
26 May 2026
Agent skill for writing authorization policies in Claude Desktoporiginal ↗
25 May 2026
Identity security in 2026original ↗
21 May 2026
EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agentsoriginal ↗
21 May 2026
Query plan adapter for Elasticsearch (Java)original ↗
20 May 2026
Already have authentication? Here's the authorization layer you still need.original ↗
20 May 2026
How much does it cost to build authorization in-house?original ↗
19 May 2026
Integrating Cerbos with Kong: A how-to guide for API gateway authorizationoriginal ↗
19 May 2026
Tokens are authorization decisions: a guide to policy-driven token issuanceoriginal ↗
19 May 2026
Query plan adapter for Convexoriginal ↗
18 May 2026
What is a Runtime Authorization Platformoriginal ↗
18 May 2026
It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governanceoriginal ↗
14 May 2026
Query plan adapter for Drizzle ORMoriginal ↗
14 May 2026
From maps to bitmaps (and from bitmaps to bitmaps)original ↗
13 May 2026
Query plan adapter for LangChain.js and ChromaDBoriginal ↗
12 May 2026
AuthZEN, Shared Signals, SCIM Events, IPSIE: Notes from the OpenID Enterprise Paneloriginal ↗
11 May 2026
How do you update authorization policies without redeploying your application?original ↗
8 May 2026
IIW42 recap: Where agent authorization got realoriginal ↗
7 May 2026
Next