Since our last update, we’ve released Cerbos PDP v0.36.0 and introduced a guide on streamlining app security updates with the @cerbos/embedded AutoUpdatingLoader feature. We have also created demos on using Cerbos with Keycloak, and in Docker Compose, along with a piece on avoiding complexities that can arise with decoupled authorization. 

We’re excited to announce that the leading authorization vendors of OpenID foundation AuthZEN Working Group, of which Cerbos is a key member, have successfully achieved conformance with the AuthZEN request/response protocol. This marks a significant advancement in bringing interoperability and standardization to the authorization market. 

Product Updates

Cerbos Hub

Since the release of Cerbos Hub in November we have been heads down ensuring the journey to get up and running with Cerbos in your environment is as slick as possible. 

Audit Logs - Get exclusive early access:

One of the big advantages of decoupling authorization into a centralized service, are the audit logs, which are generated regardless of where in the application stack the permission checks are being made.

If you are utilizing Cerbos Logs today, or planning to in the future, we have some new capabilities in the works which we would love to give you early access to. Reach out to our CPO, Alex Olivier, at alex@cerbos.dev to get started.

Explore Cerbos Hub

Cerbos PDP

The v0.36.0 version of Cerbos includes audit logs now being written in the background, in order to reduce the overhead of writing large audit log entries to slow sinks.

This release also includes a community contribution from @rcrowe, which makes the Kafka audit backend use system CA certificates if none are provided explicitly in configuration. It also addresses a case where asynchronous Kafka writes start blocking when the downstream brokers are down.

The new cerbosctl inspect command provides command-line access to the inspect Admin API endpoint introduced in the previous release. Currently it supports listing actions covered by each policy. More policy inspection options are planned for future releases.

You can find the full release notes here: v0.36.0

Cerbos PDP is open source, check out our GitHub

Helpful Content

Unpacking the intricacies of building developer tools in a shift left world

Emre Baran, Co-Founder and CEO of Cerbos, delivered a talk at the recent Civo Navigate conference, in which he explored building developer tools with relation to shift-left practices. Check out his talk to discover the six principles essential to the development of effective tools. 

Upcoming Events

A huge thank you to everyone we met at Identiverse, and to those who joined our “Future-proofing fintech security” and “Feature flags & authorization” webinars. Your support means a lot, thank you for stopping by and chatting with us.

We’re looking forward to the following conferences in the coming weeks:

• European Identity and Cloud Conf in Berlin, June 4 - 7. Check out the AuthZEN interop session on June 7th, 9am CET, at C 04
• WeAreDevelopers World Congress in Berlin, July 17 - 19. Booth A46