Aserto
Aserto provides a fine-grained authorization service that enables resource-level access controls for any application.
Our verdict
Who it's for
Fine-grained, scalable authorization for applications and APIs, delivered in minutes.
Who should look elsewhere
Requires integration into existing application codebases
Pros
- +Rapid implementation of complex authorization logic in minutes
- +High performance with real-time, millisecond-latency authorization
- +Comprehensive audit trails for compliance and visibility
- +Supports a wide range of programming languages and existing infrastructure
- +Promotes strong security posture with zero-trust and least-privilege principles
Cons
- −Requires integration into existing application codebases
- −May have a learning curve for understanding policy definition languages
- −Pricing model is not explicitly stated as having a free tier
Key features
- ✓Fine-grained resource-level access controls
- ✓Real-time authorization enforcement (~1ms)
- ✓Centralized control plane for managing users, policies, and data
- ✓SDKs and middleware for various languages (Node, Go, Python, Java, .NET, Ruby)
- ✓Pre-built integrations for identity providers, user directories, and SIEM tools
- ✓Zero-trust and least-privilege by default
- ✓Policy-based access decisions (environmental, user-centric, organizational hierarchy, resource hierarchy)
- ✓Automatic collection of authorization decisions and audit trails
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Starter | — | month | 50 policy repositories; 100 authorizer instances; 1000 users |
| Essentials | $0.2 | month | Everything in Free; Unlimited policy repositories; Unlimited authorizer instances |
| Pro | — | month | Everything in Essentials; Unlimited users; GitHub / GitLab Enterprise |
| Enterprise | — | month | Everything in Pro; Signed policy images; Self-hosted IDP gateway |