41554 blogs · [ { "id": "01a07df2-392b-7397-89dc-0513c90525f9", "title": "Cerbos PDP v0.52.0/v0.53.0: Engine performance, security hardening, and CEL path functions", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-52-v0-53-engine-performance-security-hardening-and-cel-path-functions", "published_at": "2026-05-06T10:58:48+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513c9e1793c", "title": "Authorization Management Platforms: what they do, how they work, and where they fit", "url": "https://cerbos.dev/blog/authorization-management-platforms", "published_at": "2026-05-05T12:29:49+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ca68fa01", "title": "PocketOS AI coding agent deleted a production database in 9 seconds", "url": "https://cerbos.dev/blog/ai-coding-agent-deleted-a-production-database-in-9-seconds", "published_at": "2026-05-01T11:53:47+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cb071e04", "title": "Non-Human Identity management still has a blind spot", "url": "https://cerbos.dev/blog/non-human-identity-management-has-a-blind-spot", "published_at": "2026-04-30T10:43:40+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cb8a89fa", "title": "Supabase alternative in 2026: Best open source auth options", "url": "https://cerbos.dev/blog/supabase-alternative-best-open-source-auth-options", "published_at": "2026-04-28T16:15:28+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cc2ee36f", "title": "Benefits of on-premise authorization: Why enterprises are moving toward self-hosted", "url": "https://cerbos.dev/blog/benefits-of-on-premise-authorization", "published_at": "2026-04-24T13:28:02+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cc9d8021", "title": "Authorization policies: How to write, test, and validate them (faster with AI)", "url": "https://cerbos.dev/blog/authorization-policies-how-to-write-test-validate-with-ai-help", "published_at": "2026-04-22T12:21:56+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cd12680a", "title": "Agent skill for writing authorization policies", "url": "https://cerbos.dev/blog/agent-skill-for-writing-authorization-policies", "published_at": "2026-04-21T12:13:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cdb2a0f1", "title": "Why centralized authorization governance reduces incident response time", "url": "https://cerbos.dev/blog/centralized-authorization-governance-reduces-incident-response-time", "published_at": "2026-04-17T11:36:59+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ce2880d7", "title": "OPA alternative", "url": "https://cerbos.dev/blog/opa-alternative", "published_at": "2026-04-16T16:17:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cedf1733", "title": "Why AI agents make authorization a right now problem", "url": "https://cerbos.dev/blog/ai-agents-make-authorization-a-right-now-problem", "published_at": "2026-04-15T12:20:26+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cf68b62f", "title": "Implement authorization and access control in an Express application", "url": "https://cerbos.dev/blog/implement-authorization-in-express", "published_at": "2026-04-14T20:59:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513cfd8ba0d", "title": "Modernizing legacy application authorization: why it’s your biggest security blind spot", "url": "https://cerbos.dev/blog/modernizing-authorization-for-legacy-applications", "published_at": "2026-04-14T13:04:40+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d06b4178", "title": "How to add authorization to legacy applications without code changes", "url": "https://cerbos.dev/blog/guide-add-authorization-to-legacy-applications-no-code-changes", "published_at": "2026-04-11T22:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d11bca8f", "title": "5 authorization blind spots auditors find, and how to fix them", "url": "https://cerbos.dev/blog/5-authorization-blind-spots-auditors-find-and-how-to-fix-them", "published_at": "2026-04-10T17:14:40+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d181641a", "title": "Row-level security for Apache Trino, powered by Cerbos Synapse", "url": "https://cerbos.dev/blog/row-level-security-for-apache-trino", "published_at": "2026-04-07T12:34:34+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d1d973ef", "title": "AI Security Platforms (AISP): What they are, why they matter, and how they work", "url": "https://cerbos.dev/blog/ai-security-platforms-aisp-what-they-are", "published_at": "2026-04-03T12:46:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d29d23f5", "title": "Top 9 Identity & Access Management (IAM) Tools for 2026", "url": "https://cerbos.dev/blog/identity-and-access-management-tools", "published_at": "2026-04-02T10:31:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d365a27d", "title": "Authelia vs Authentik in 2026: Which self-hosted IdP should you choose", "url": "https://cerbos.dev/blog/authelia-vs-authentik-2026-idp", "published_at": "2026-04-01T16:17:36+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d44220a5", "title": "Can non-engineers manage authorization policies with Cerbos?", "url": "https://cerbos.dev/blog/can-non-engineers-manage-authorization-policies-with-cerbos", "published_at": "2026-03-29T17:26:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d50b1949", "title": "Governing AI coding agents with Cerbos Synapse", "url": "https://cerbos.dev/blog/governing-ai-coding-agents-with-cerbos-synapse", "published_at": "2026-03-27T14:49:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d55d24f2", "title": "Your AI coding agents need guardrails. Not the kind you think", "url": "https://cerbos.dev/blog/your-ai-coding-agents-need-guardrails-not-the-kind-you-think", "published_at": "2026-03-26T15:30:37+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d5a76c36", "title": "From open-source policy engine to enterprise authorization management platform", "url": "https://cerbos.dev/blog/from-open-source-policy-engine-to-enterprise-authorization-management-platform", "published_at": "2026-03-24T11:41:10+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d6664602", "title": "Mapping business requirements to authorization policy for utilities", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-utilities", "published_at": "2026-03-23T12:47:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d67d3556", "title": "Introducing Cerbos Synapse: unified authorization context and enforcement across your stack", "url": "https://cerbos.dev/blog/introducing-cerbos-synapse-unified-authorization-context-and-enforcement-across-your-stack", "published_at": "2026-03-20T16:22:42+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d686e45d", "title": "The CISO’s guide to implementing Zero Trust: Making adaptive access control work in practice", "url": "https://cerbos.dev/blog/cisos-guide-zero-trust-making-adaptive-access-control-work", "published_at": "2026-03-18T11:29:45+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d6d037de", "title": "Automating IAM for compliance, security, and business agility", "url": "https://cerbos.dev/blog/automating-iam-for-compliance-security-and-business-agility", "published_at": "2026-03-17T19:20:45+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d6e41eea", "title": "Authorization became the main character at Gartner IAM London", "url": "https://cerbos.dev/blog/authorization-main-character-at-gartner-iam-london", "published_at": "2026-03-12T13:43:58+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d702265f", "title": "How does Cerbos help with compliance audits and certifications?", "url": "https://cerbos.dev/blog/how-does-cerbos-help-with-compliance-audits-and-certifications", "published_at": "2026-03-05T15:49:24+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d77a202c", "title": "Overcoming IAM blind spots and fragmentation for continuous governance", "url": "https://cerbos.dev/blog/overcoming-iam-blind-spots-and-fragmentation-for-continuous-governance", "published_at": "2026-03-02T16:33:58+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d8072817", "title": "Zero Trust in cybersecurity - how it works", "url": "https://cerbos.dev/blog/zero-trust-in-cybersecurity-how-it-works", "published_at": "2026-03-02T11:20:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d8dd3e73", "title": "How long does it take to implement Cerbos in production?", "url": "https://cerbos.dev/blog/how-long-to-implement-cerbos-in-production", "published_at": "2026-02-27T12:55:08+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d93df3fb", "title": "When breach becomes personal. CISOs, identity failures and the road to continuous governance", "url": "https://cerbos.dev/blog/breach-becomes-personal-ciso-identity-failures-and-continuous-governance", "published_at": "2026-02-26T12:25:05+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d99aca66", "title": "The four pillars of access control in banking", "url": "https://cerbos.dev/blog/the-four-pillars-of-access-control-in-banking", "published_at": "2026-02-26T11:38:09+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513d9ca7e63", "title": "Policy as Code with Azure API Management and Cerbos", "url": "https://cerbos.dev/blog/policy-as-code-azure-api-management-cerbos", "published_at": "2026-02-25T12:21:17+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513da202ab2", "title": "AI is turning weak permission management into systemic banking risk", "url": "https://cerbos.dev/blog/ai-is-turning-weak-permission-management-into-systemic-banking-risk", "published_at": "2026-02-24T12:48:09+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513daee43cd", "title": "Fine-grained authorization for AI agents with Cerbos and Aperture by Tailscale", "url": "https://cerbos.dev/blog/fine-grained-authorization-for-ai-agents-with-cerbos-and-aperture-by-tailscale", "published_at": "2026-02-17T14:01:41+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dba7e549", "title": "10 fintech security tools to build a compliant and resilient security stack", "url": "https://cerbos.dev/blog/10-fintech-security-tools-to-build-a-compliant-and-resilient-security-stack", "published_at": "2026-02-16T17:51:40+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dc041506", "title": "Fintech security architectures: where they break and why", "url": "https://cerbos.dev/blog/fintech-security-architectures-where-they-break-and-why", "published_at": "2026-02-13T17:07:44+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dc5a338b", "title": "MCP authorization: Securing Model Context Protocol servers with fine-grained access control", "url": "https://cerbos.dev/blog/mcp-authorization", "published_at": "2026-02-13T15:02:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dc76c57d", "title": "Cerbos PDP v0.51.0: Policy lifecycle management, audit enhancements, and scopes", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-51-0-policy-lifecycle-management-audit-enhancements-and-scopes", "published_at": "2026-02-10T13:16:38+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dce2ad88", "title": "Best open source auth tools & auth software for enterprises [2026]", "url": "https://cerbos.dev/blog/best-open-source-auth-tools-and-software-for-enterprises-2026", "published_at": "2026-02-07T18:03:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dddb6ea6", "title": "Cerbos Hub Playground: Recent updates", "url": "https://cerbos.dev/blog/cerbos-hub-playground-recent-updates", "published_at": "2026-02-06T12:09:44+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513de3981ee", "title": "Announcing ePDP Rules: Fine-grained control for embedded policy bundles", "url": "https://cerbos.dev/blog/epdp-rules-fine-grained-control-for-embedded-policy-bundles", "published_at": "2026-02-04T14:44:30+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513de4ee2ae", "title": "What is externalized authorization management (EAM) and its benefits", "url": "https://cerbos.dev/blog/externalized-authorization-management-eam-and-benefits", "published_at": "2026-02-02T17:22:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dec27054", "title": "Mapping business requirements to authorization policy for aviation", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-aviation", "published_at": "2026-01-30T12:23:27+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513df43cc79", "title": "A shared authorization layer that adapts to context", "url": "https://cerbos.dev/blog/shared-authorization-layer-that-adapts-to-context", "published_at": "2026-01-28T13:16:57+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513dfb9d79b", "title": "What is authorization as a service?", "url": "https://cerbos.dev/blog/authorization-as-a-service", "published_at": "2026-01-26T14:50:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e071bec8", "title": "Cerbos Hub is now available on-premise", "url": "https://cerbos.dev/blog/cerbos-hub-now-available-on-premise", "published_at": "2026-01-22T14:37:26+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e13c7ff4", "title": "Authorization as a continuously governed control", "url": "https://cerbos.dev/blog/authorization-as-a-continuously-governed-control", "published_at": "2026-01-21T10:41:44+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e1ddf241", "title": "When authorization is static, risk accumulates silently", "url": "https://cerbos.dev/blog/risks-of-static-authorization", "published_at": "2026-01-16T11:35:05+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e2b98d6b", "title": "Year in review: 2025", "url": "https://cerbos.dev/blog/year-in-review-2025", "published_at": "2026-01-15T17:10:33+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e2f42528", "title": "OpenID AuthZEN is official, and Cerbos is ready", "url": "https://cerbos.dev/blog/openid-authzen-is-official-cerbos-is-ready", "published_at": "2026-01-13T09:56:10+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e3b6d7b7", "title": "MCP and Zero Trust: Securing AI agents with identity and policy", "url": "https://cerbos.dev/blog/mcp-and-zero-trust-securing-ai-agents-with-identity-and-policy", "published_at": "2026-01-09T13:20:01+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e49413b9", "title": "10 critical challenges CISOs face in 2026 and how to solve them", "url": "https://cerbos.dev/blog/10-challenges-cisos-face-and-how-to-solve-them", "published_at": "2026-01-05T12:05:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e509f864", "title": "Cerbos PDP v0.50.0: Stricter CEL, more predictable scope plans, and faster evaluation", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-50-0-stricter-cel-predictable-scope-plans-faster-evaluation", "published_at": "2025-12-22T12:09:27+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e5d75343", "title": "Cerbos PDP and Cerbos Hub: Choosing the right setup for your team", "url": "https://cerbos.dev/blog/cerbos-pdp-and-cerbos-hub-choosing-the-right-setup-for-your-team", "published_at": "2025-12-18T10:39:05+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e6bf0f4b", "title": "Gartner IAM Summit 2025: Authorization maturity, AuthZEN momentum, and why identity security is expanding to every workload", "url": "https://cerbos.dev/blog/gartner-iam-summit-2025-authorization-authzen-identity-security-expanding-to-every-workload", "published_at": "2025-12-15T14:17:14+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e72b036f", "title": "Secure RAG: Implement LLM Access Control with Cerbos", "url": "https://cerbos.dev/blog/access-control-for-rag-llms", "published_at": "2025-12-10T12:13:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e7af75fa", "title": "Cerbos PDP v0.48: OpenID AuthZEN support, improved query plans, faster bundle loading", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-48-open-id-auth-zen-support-improved-query-plans-faster-bundle-loading", "published_at": "2025-12-09T11:41:51+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e7f6acac", "title": "Key compliance regulations for non-human identities", "url": "https://cerbos.dev/blog/key-compliance-regulations-for-non-human-identities", "published_at": "2025-12-05T17:33:32+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e82bbb41", "title": "How to implement scalable multitenant authorization", "url": "https://cerbos.dev/blog/how-to-implement-scalable-multitenant-authorization", "published_at": "2025-12-04T13:31:04+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e86ffede", "title": "Cerbos vs. OPA", "url": "https://cerbos.dev/blog/cerbos-vs-opa", "published_at": "2025-11-27T13:54:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e943c6a0", "title": "Key takeaways from Workload Identity Day 0 at KubeCon", "url": "https://cerbos.dev/blog/key-takeaways-workload-identity-day-0-kubecon", "published_at": "2025-11-27T12:44:52+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e9ab7f91", "title": "What is Cerbos?", "url": "https://cerbos.dev/blog/what-is-cerbos", "published_at": "2025-11-27T00:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513e9f91927", "title": "Mongoose adapter for Cerbos Query Plans v2.0", "url": "https://cerbos.dev/blog/updated-mongoose-adapter-for-cerbos-query-plans-v2", "published_at": "2025-11-25T14:10:23+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ea18482b", "title": "Staying compliant - What you need to know", "url": "https://cerbos.dev/blog/staying-compliant", "published_at": "2025-11-20T17:16:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ea55eb37", "title": "Migrating from OPA and Rego to Cerbos", "url": "https://cerbos.dev/blog/migrating-from-opa-rego-to-cerbos", "published_at": "2025-11-20T14:54:14+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513eb15588d", "title": "Broken access control still tops the list: OWASP top 10 2025", "url": "https://cerbos.dev/blog/broken-access-control-owasp-top-10-2025", "published_at": "2025-11-20T11:27:36+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513eb834b80", "title": "Platform engineering leaders are racing to enable AI safely - takeaways from KubeCon NA 2025", "url": "https://cerbos.dev/blog/platform-engineering-leaders-are-racing-to-enable-ai-safely-kubecon", "published_at": "2025-11-18T11:51:33+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ec209647", "title": "AuthZEN: Standards-based authorization for enterprises", "url": "https://cerbos.dev/blog/authzen-standards-based-authorization-for-enterprises", "published_at": "2025-11-07T12:28:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ed0dac8a", "title": "What ISC2 congress 2025 made clear about modern compliance", "url": "https://cerbos.dev/blog/isc2-congress-2025-modern-compliance", "published_at": "2025-11-06T10:07:52+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513edebdb23", "title": "Automate Cerbos policy uploads with the cerbos-store-action GitHub Action", "url": "https://cerbos.dev/blog/automate-cerbos-policy-uploads-with-the-cerbos-store-action-git-hub-action", "published_at": "2025-11-03T15:57:21+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513ee184906", "title": "Mapping business requirements to authorization policy in HR systems", "url": "https://cerbos.dev/blog/business-requirements-to-authorization-policy-in-hr-systems", "published_at": "2025-11-02T12:11:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513eec184bc", "title": "Mapping business requirements to authorization policy for insurance", "url": "https://cerbos.dev/blog/mapping-business-requirements-to-authorization-policy-for-insurance", "published_at": "2025-10-30T15:22:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513efbd1c3a", "title": "Run Cerbos natively inside AWS Lambda", "url": "https://cerbos.dev/blog/run-cerbos-natively-inside-aws-lambda", "published_at": "2025-10-30T10:29:12+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f0a8fe0e", "title": "Cerbos PDP v0.47.0: AWS Lambda support, Git-aware Hub uploads, and smarter schema diagnostics", "url": "https://cerbos.dev/blog/cerbos-pdp-v0-47-0-aws-lambda-support-git-aware-hub-uploads-schema-diagnostics", "published_at": "2025-10-30T10:10:41+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f1138485", "title": "Building your own authorization solution vs. buying an off-the-shelf one", "url": "https://cerbos.dev/blog/build-vs-buy-authorization", "published_at": "2025-10-28T15:00:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f123f0fb", "title": "Zero trust has reached operational reality", "url": "https://cerbos.dev/blog/zero-trust-has-reached-operational-reality", "published_at": "2025-10-27T14:03:26+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f14cdd71", "title": "Modern application architecture trends: AI, microservices, and pragmatic security", "url": "https://cerbos.dev/blog/modern-application-architecture-trends", "published_at": "2025-10-21T13:15:06+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f20c15cf", "title": "Zero-Trust for microservices, a practical blueprint", "url": "https://cerbos.dev/blog/zero-trust-for-microservices", "published_at": "2025-10-17T13:56:05+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f23c2b15", "title": "How to implement resource-based authorization", "url": "https://cerbos.dev/blog/how-to-implement-resource-based-authorization", "published_at": "2025-10-13T10:55:19+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f33b848f", "title": "What is access control?", "url": "https://cerbos.dev/blog/what-is-access-control", "published_at": "2025-10-10T14:34:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f3452778", "title": "How to secure your FastMCP server with permission management", "url": "https://cerbos.dev/blog/how-to-secure-your-fast-mcp-server-with-permission-management", "published_at": "2025-10-08T11:03:57+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f406c75e", "title": "NHI security: How to manage non-human identities and AI agents", "url": "https://cerbos.dev/blog/nhi-security-how-to-manage-non-human-identities-and-ai-agents", "published_at": "2025-10-03T12:45:03+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f4491179", "title": "MCP security & AI agent authorization. A CISO and architect’s guide to securing the new AI perimeter.", "url": "https://cerbos.dev/blog/mcp-security-ai-agent-authorization-a-ciso-and-architects-guide", "published_at": "2025-09-30T16:03:12+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f464c4e9", "title": "Mapping business requirements to authorization policy for medtech", "url": "https://cerbos.dev/blog/business-requirements-to-authorization-policy-medtech", "published_at": "2025-09-28T15:06:00+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e22a7caf", "title": "AI agents, the Model Context Protocol, and the future of authorization guardrails", "url": "https://cerbos.dev/news/securing-ai-agents-model-context-protocol", "published_at": "2025-09-27T16:02:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f53b7994", "title": "Filtering database results with Cerbos query plans", "url": "https://cerbos.dev/blog/filtering-database-results-with-cerbos-query-plans", "published_at": "2025-09-25T17:31:43+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f62e586b", "title": "Service-to-service authorization: A guide to non-user principals", "url": "https://cerbos.dev/blog/service-to-service-authorization", "published_at": "2025-09-24T21:13:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f6ac294e", "title": "Making Cerbos policies bulletproof with schemas", "url": "https://cerbos.dev/blog/making-cerbos-policies-bulletproof-with-schemas", "published_at": "2025-09-22T10:49:00+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f736f4a9", "title": "Designing an authorization model for an enterprise", "url": "https://cerbos.dev/blog/designing-an-authorization-model-for-an-enterprise", "published_at": "2025-09-22T10:31:24+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e22db76f", "title": "GitOps for application authorization", "url": "https://cerbos.dev/news/gitops-for-application-authorization", "published_at": "2025-09-17T21:24:50+00:00" }, { "id": "01a07df2-392b-7397-89dc-0513f7f50a8f", "title": "Why using GitOps for authorization and access control is a good idea", "url": "https://cerbos.dev/blog/why-using-gitops-for-authorization-and-access-control-is-a-good-idea", "published_at": "2025-09-17T21:15:52+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e270c248", "title": "The Stack Overflow podcast: Going stateless with authorization-as-a-service", "url": "https://cerbos.dev/news/the-stack-overflow-podcast-going-stateless-with-authorization-as-a-service", "published_at": "2025-09-17T20:59:35+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e290de1e", "title": "The Business of Open Source podcast: Simplifying authorization with Emre Baran", "url": "https://cerbos.dev/news/the-business-of-open-source-podcast-simplifying-authorization-with-emre-baran", "published_at": "2025-09-17T20:58:47+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e2aa22ae", "title": "Techstrong TV: Decoupling in software development, Emre Baran | KubeCon + CloudNativeCon Europe 2023", "url": "https://cerbos.dev/news/techstrong-tv-decoupling-in-software-development-emre-baran-kube-con-cloud-native-con-europe-2023", "published_at": "2025-09-17T20:58:06+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e33d477d", "title": "Flagsmith podcast: The Cerbos story, from vision to reality", "url": "https://cerbos.dev/news/flagsmith-podcast-the-cerbos-story-from-vision-to-reality", "published_at": "2025-09-17T20:56:45+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e387d922", "title": "Cloud Native Live: Modernizing authorization", "url": "https://cerbos.dev/news/cloud-native-live-modernizing-authorization", "published_at": "2025-09-17T20:56:04+00:00" }, { "id": "01a07df2-392c-7260-a8e3-1075e3940fe8", "title": "Ask a CISO podcast: Decoupling authorization from your applications", "url": "https://cerbos.dev/news/ask-a-ciso-podcast-decoupling-authorization-from-your-applications", "published_at": "2025-09-17T20:44:51+00:00" } ] posts Claim your blog

Back to Cerbos Blog

Blog · corpus.blog/blogs/cerbos.dev/posts

Cerbos Blog

cerbos.dev

2026

Cerbos PDP v0.52.0/v0.53.0: Engine performance, security hardening, and CEL path functions original ↗

6 May 2026

Authorization Management Platforms: what they do, how they work, and where they fit original ↗

5 May 2026

PocketOS AI coding agent deleted a production database in 9 seconds original ↗

1 May 2026

Non-Human Identity management still has a blind spot original ↗

30 Apr 2026

Supabase alternative in 2026: Best open source auth options original ↗

28 Apr 2026

Benefits of on-premise authorization: Why enterprises are moving toward self-hosted original ↗

24 Apr 2026

Authorization policies: How to write, test, and validate them (faster with AI)original ↗

22 Apr 2026

Agent skill for writing authorization policies original ↗

21 Apr 2026

Why centralized authorization governance reduces incident response time original ↗

17 Apr 2026

OPA alternative original ↗

16 Apr 2026

Why AI agents make authorization a right now problem original ↗

15 Apr 2026

Implement authorization and access control in an Express application original ↗

14 Apr 2026

Modernizing legacy application authorization: why it’s your biggest security blind spot original ↗

14 Apr 2026

How to add authorization to legacy applications without code changes original ↗

11 Apr 2026

5 authorization blind spots auditors find, and how to fix them original ↗

10 Apr 2026

Row-level security for Apache Trino, powered by Cerbos Synapse original ↗

7 Apr 2026

AI Security Platforms (AISP): What they are, why they matter, and how they work original ↗

3 Apr 2026

Top 9 Identity & Access Management (IAM) Tools for 2026 original ↗

2 Apr 2026

Authelia vs Authentik in 2026: Which self-hosted IdP should you choose original ↗

1 Apr 2026

Can non-engineers manage authorization policies with Cerbos?original ↗

29 Mar 2026

Governing AI coding agents with Cerbos Synapse original ↗

27 Mar 2026

Your AI coding agents need guardrails. Not the kind you think original ↗

26 Mar 2026

From open-source policy engine to enterprise authorization management platform original ↗

24 Mar 2026

Mapping business requirements to authorization policy for utilities original ↗

23 Mar 2026

Introducing Cerbos Synapse: unified authorization context and enforcement across your stack original ↗

20 Mar 2026

The CISO’s guide to implementing Zero Trust: Making adaptive access control work in practice original ↗

18 Mar 2026

Automating IAM for compliance, security, and business agility original ↗

17 Mar 2026

Authorization became the main character at Gartner IAM London original ↗

12 Mar 2026

How does Cerbos help with compliance audits and certifications?original ↗

5 Mar 2026

Overcoming IAM blind spots and fragmentation for continuous governance original ↗

2 Mar 2026

Zero Trust in cybersecurity - how it works original ↗

2 Mar 2026

How long does it take to implement Cerbos in production?original ↗

27 Feb 2026

When breach becomes personal. CISOs, identity failures and the road to continuous governance original ↗

26 Feb 2026

The four pillars of access control in banking original ↗

26 Feb 2026

Policy as Code with Azure API Management and Cerbos original ↗

25 Feb 2026

AI is turning weak permission management into systemic banking risk original ↗

24 Feb 2026

Fine-grained authorization for AI agents with Cerbos and Aperture by Tailscale original ↗

17 Feb 2026

10 fintech security tools to build a compliant and resilient security stack original ↗

16 Feb 2026

Fintech security architectures: where they break and why original ↗

13 Feb 2026

MCP authorization: Securing Model Context Protocol servers with fine-grained access control original ↗

13 Feb 2026

Cerbos PDP v0.51.0: Policy lifecycle management, audit enhancements, and scopes original ↗

10 Feb 2026

Best open source auth tools & auth software for enterprises [2026]original ↗

7 Feb 2026

Cerbos Hub Playground: Recent updates original ↗

6 Feb 2026

Announcing ePDP Rules: Fine-grained control for embedded policy bundles original ↗

4 Feb 2026

What is externalized authorization management (EAM) and its benefits original ↗

2 Feb 2026

Mapping business requirements to authorization policy for aviation original ↗

30 Jan 2026

A shared authorization layer that adapts to context original ↗

28 Jan 2026

What is authorization as a service?original ↗

26 Jan 2026

Cerbos Hub is now available on-premise original ↗

22 Jan 2026

Authorization as a continuously governed control original ↗

21 Jan 2026

When authorization is static, risk accumulates silently original ↗

16 Jan 2026

Year in review: 2025 original ↗

15 Jan 2026

OpenID AuthZEN is official, and Cerbos is ready original ↗

13 Jan 2026

MCP and Zero Trust: Securing AI agents with identity and policy original ↗

9 Jan 2026

10 critical challenges CISOs face in 2026 and how to solve them original ↗

5 Jan 2026

2025

Cerbos PDP v0.50.0: Stricter CEL, more predictable scope plans, and faster evaluation original ↗

22 Dec 2025

Cerbos PDP and Cerbos Hub: Choosing the right setup for your team original ↗

18 Dec 2025

Gartner IAM Summit 2025: Authorization maturity, AuthZEN momentum, and why identity security is expanding to every workload original ↗

15 Dec 2025

Secure RAG: Implement LLM Access Control with Cerbos original ↗

10 Dec 2025

Cerbos PDP v0.48: OpenID AuthZEN support, improved query plans, faster bundle loading original ↗

9 Dec 2025

Key compliance regulations for non-human identities original ↗

5 Dec 2025

How to implement scalable multitenant authorization original ↗

4 Dec 2025

Cerbos vs. OPA original ↗

27 Nov 2025

Key takeaways from Workload Identity Day 0 at KubeCon original ↗

27 Nov 2025

What is Cerbos?original ↗

27 Nov 2025

Mongoose adapter for Cerbos Query Plans v2.0 original ↗

25 Nov 2025

Staying compliant - What you need to know original ↗

20 Nov 2025

Migrating from OPA and Rego to Cerbos original ↗

20 Nov 2025

Broken access control still tops the list: OWASP top 10 2025 original ↗

20 Nov 2025

Platform engineering leaders are racing to enable AI safely - takeaways from KubeCon NA 2025 original ↗

18 Nov 2025

AuthZEN: Standards-based authorization for enterprises original ↗

7 Nov 2025

What ISC2 congress 2025 made clear about modern compliance original ↗

6 Nov 2025

Automate Cerbos policy uploads with the cerbos-store-action GitHub Action original ↗

3 Nov 2025

Mapping business requirements to authorization policy in HR systems original ↗

2 Nov 2025

Mapping business requirements to authorization policy for insurance original ↗

30 Oct 2025

Run Cerbos natively inside AWS Lambda original ↗

30 Oct 2025

Cerbos PDP v0.47.0: AWS Lambda support, Git-aware Hub uploads, and smarter schema diagnostics original ↗

30 Oct 2025

Building your own authorization solution vs. buying an off-the-shelf one original ↗

28 Oct 2025

Zero trust has reached operational reality original ↗

27 Oct 2025

Modern application architecture trends: AI, microservices, and pragmatic security original ↗

21 Oct 2025

Zero-Trust for microservices, a practical blueprint original ↗

17 Oct 2025

How to implement resource-based authorization original ↗

13 Oct 2025

What is access control?original ↗

10 Oct 2025

How to secure your FastMCP server with permission management original ↗

8 Oct 2025

NHI security: How to manage non-human identities and AI agents original ↗

3 Oct 2025

MCP security & AI agent authorization. A CISO and architect’s guide to securing the new AI perimeter.original ↗

30 Sept 2025

Mapping business requirements to authorization policy for medtech original ↗

28 Sept 2025

AI agents, the Model Context Protocol, and the future of authorization guardrails original ↗

27 Sept 2025

Filtering database results with Cerbos query plans original ↗

25 Sept 2025

Service-to-service authorization: A guide to non-user principals original ↗

24 Sept 2025

Making Cerbos policies bulletproof with schemas original ↗

22 Sept 2025

Designing an authorization model for an enterprise original ↗

22 Sept 2025

GitOps for application authorization original ↗

17 Sept 2025

Why using GitOps for authorization and access control is a good idea original ↗

17 Sept 2025

The Stack Overflow podcast: Going stateless with authorization-as-a-service original ↗

17 Sept 2025

The Business of Open Source podcast: Simplifying authorization with Emre Baran original ↗

17 Sept 2025

Techstrong TV: Decoupling in software development, Emre Baran | KubeCon + CloudNativeCon Europe 2023 original ↗

17 Sept 2025

Flagsmith podcast: The Cerbos story, from vision to reality original ↗

17 Sept 2025

Cloud Native Live: Modernizing authorization original ↗

17 Sept 2025

Ask a CISO podcast: Decoupling authorization from your applications original ↗

17 Sept 2025