Please turn JavaScript on
Cerbos - All Posts icon

Cerbos - All Posts

Subscribe in seconds and receive Cerbos - All Posts's news feed updates in your inbox, on your phone or even read them from your own news page here on follow.it.

You can select the updates using tags or topics and you can add as many websites to your feed as you like.

And the service is entirely free!

Follow Cerbos - All Posts: Cerbos: Authorization for Enterprise Software and AI

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.49 / day

Message History

Envoy external authorization with the ext_authz filter lets the gateway and the service run checks against one policy set. This guide covers the CheckRequest to Cerbos mapping in CEL, policy outputs as request headers, embedded versus external PDP, bypass paths, caching trade offs and what AuthZEN leaves undefined.

Read full story
Cerbos PDP v0.55.0 adds strict evaluation mode, which turns runtime errors in policy conditions into explicit denials instead of silent skips. This release also lets auxData carry multiple named JWTs, folds constant expressions at compile time, and upgrades CEL with 21 new expression functions for networking, regex, and sets.

Read full story
A rundown of the latest Cerbos Hub updates. Audit log exports you can pull into your own tooling for archiving or compliance, playground compiler errors with line and column detail, schema validation on principal and resource fixtures, and egress IPs for GitHub allow lists.

Read full story
MCP leans on OAuth 2.1 for authentication, but OAuth scopes cannot answer fine-grained tool authorization. Here is what the standards cover, and what AuthZEN adds.

Read full story
An MCP gateway routes and manages traffic to MCP servers, but routing is not authorization. Here is what a gateway does, where the authorization gap is, and how to close it.

Read full story