Cerbos
Cerbos provides an externalized authorization layer designed for enterprise software and AI.
Our verdict
Who it's for
Fine-grained, contextual, and continuous authorization for enterprise software and AI systems.
Who should look elsewhere
Pricing for higher tiers can be significant for large enterprises.
Pros
- +Significantly accelerates time to market for new roles and permissions.
- +Reduces AI security risks by preventing over-permissioning and shadow access.
- +Offers substantial cost reduction by eliminating custom authorization infrastructure.
- +Provides comprehensive audit logs for compliance and visibility into security posture.
- +Supports a wide range of programming languages and deployment environments.
Cons
- −Pricing for higher tiers can be significant for large enterprises.
- −Requires integration into existing applications and infrastructure, which may involve initial setup effort.
Key features
- ✓Fine-grained, contextual, and continuous authorization
- ✓Policy Decision Point (PDP) for access evaluation
- ✓Policy Enforcement Point (PEP) SDKs for in-app enforcement
- ✓Cerbos Hub for centralized policy management, testing, and deployment
- ✓Programmatic policy management via CLI and API
- ✓Automated policy validation and testing
- ✓Audit-ready logs for compliance (GDPR, SOC 2, HIPAA, ISO 27001)
- ✓Support for ABAC, RBAC, and PBAC authorization models
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Open source | — | month | YAML-based policy definition; Audit logs; CI/CD & IDE tooling |
| Proof of Concept | $0 | month | Up to 100 monthly active principals; 1 workspace, 2 developers; 2 Playgrounds |
| Development | $25 | month | First 100 monthly active principals included; 3 workspaces, 5 developers; Up to 5 Playgrounds |
| Production | $933 | month | First 5000 monthly active principals included; Unlimited workspaces & developers; Unlimited Playgrounds |
| Enterprise | — | month | SSO support; Self-hosted Cerbos Hub; Custom audit log retention |