cerbos.devCrawled Oct 15, 2026
This guide explains how to install the Cerbos policy skill in Cursor, describe access rules in plain English, use schemas and derived roles as context, validate policies with the integrated terminal, and produce a policy bundle.
A practical guide to writing authorization policies in VSCode using GitHub Copilot agent mode and the Cerbos policy skill. Covers install, the gh skill CLI, chat.agentSkillsLocations, file-scoped *.instructions.md, a typical drafting session, and how validation runs in the integrated terminal.
Authentication vs authorization explained. AuthN verifies who a user is, AuthZ decides what they can do. This guide covers ID and access tokens, OAuth 2.0, OpenID Connect, SAML, SSO, RBAC and ABAC, the key differences between the two, and the mistakes teams make building them.
The page explains authorization in microservices, including enforcement, authorization data patterns, RBAC and ABAC, service-to-service authorization, and the externalized policy decision point pattern.
Current open roles and how to apply.
Pricing options
Compare Authentik and Keycloak for self-hosted IAM. See SSO, MFA, protocol support, operations, authorization limits, and where Cerbos fits.
Compare Keycloak and ZITADEL for self hosted IAM. See SSO, MFA, federation, multi-tenancy, operations, authorization limits, and Cerbos fit.
Ory Hydra and SuperTokens solve different authentication problems. Compare OAuth2 and OIDC token infrastructure against fast product login and session handling, and see where Cerbos fits as the authorization layer after authentication.
Cerbos describes its authorization management platform and its use across applications, gateways, workloads, and AI agents. The page covers the company, its approach to externalized authorization, and open standards such as OpenID AuthZEN.
The company provides access control for Zero Trust environments and AI systems, with contextual authorization across software layers.
The page explains how Cerbos collects, processes, secures, and shares personal data under GDPR, including information gathered, cookies, log files, and geo-location, as well as data access, correction, deletion, and portability rights.
Terms of service for cerbos.dev, operated by Zenauth Ltd. Covers account registration, the limited licence to use the site, acceptable use, user content, disclaimers, termination, and governing law in England and Wales.
