Cerbos
Manage authorization for enterprise software and AI with Cerbos
Cerbos is an authorization management platform that provides runtime access control for applications, gateways, workloads, and AI agents. It centralizes policy-based access control across RBAC, ABAC, ReBAC, and PBAC models, replacing scattered authorization logic with centrally defined, approved, and updated policies. The platform covers policy administration, data enrichment, access decisions, and enforcement, and includes structured decision logs with policy version lineage for audit and compliance purposes.
The product comprises Cerbos Hub, a cloud control plane for policy authoring, testing, versioning, and distribution; Cerbos Synapse, an enrichment and orchestration layer that fetches identity, resource, and relationship data from external systems; Cerbos PDP, an open source, stateless policy decision point; and Cerbos PEP SDKs, language-native client libraries for enforcement. SDKs are available for JS, Python, Go, Rust, Java, and .NET, with integrations for API gateways, data platforms, infrastructure services, and identity providers. PDPs run in your environment while Hub runs in the cloud, and deployment options include cloud, on-premise, and air-gapped.
Cerbos is aimed at security, identity, engineering, and product teams. The open source PDP is free forever. Cerbos Hub offers a Proof of Concept plan at no cost with limits on monthly active principals, a Development plan with a three-month trial, a Production plan, and a custom Enterprise plan. Hub pricing is based on monthly active principals, and Cerbos is available on AWS Marketplace.
12 alternatives to Cerbos
Ranked by how well each tool replaces Cerbos: shared features, audience, price and popularity.
- 63 out of 100 match$15/mo
- 60 out of 100 matchUsage-based
- 59 out of 100 match$249/mo
The Authorization Platform for AI and Modern Applications
Covers 7 of 15 key features.
Free planOpen source58 out of 100 match$1,460/moAuthentication and authorization platform for users, AI agents, and machine identities
Covers 1 of 15 key features.
Free plan57 out of 100 match$35/mo- 57 out of 100 match$150/mo
An open-source identity management platform that simplifies authentication and authorizati
Covers 8 of 15 key features.
Open source55 out of 100 match—The authentication framework for TypeScript
Covers 5 of 15 key features and starts cheaper.
Free planOpen source55 out of 100 match$20/moIdentity and access management for applications, enterprises, and AI agents
Covers 3 of 15 key features.
Free planOpen source55 out of 100 match$64.17/mo- 55 out of 100 match$162/mo
- 54 out of 100 matchFree
Implement modern authentication on your terms with Hanko
Covers 4 of 15 key features.
Free planOpen source54 out of 100 match$29/mo