You are receiving this email because either we have met, chatted, or you've visited our website cerbos.devand asked us to keep you up-to-date. If you have been forwarded this email, you can subscribeand receive future updates directly from us. If you prefer not to receive these updates, you can unsubscribe below, but we hope you stay!
Cerbos Hub is now live in public beta!
Cerbos Hub is a collaborative solution for developer teams who want to save time, streamline their workflows and confidently roll out authorization updates, letting them focus on delivering great products and end-user experiences.
Cerbos Hub provides a complete and centralized authorization SaaS solution. It delivers a management interface and policy distribution infrastructure that extends Cerbos PDP’s, our open source product’s, functionality.
The v0.31 release of Cerbos Policy Decision Point, our open source product, is packed with new features such as flexible policy testing, support for derived roles inspection, TLS certificate rotation automation, and more.
The new runtime.effectiveDerivedRoles variable allows policy authors to inspect activated derived roles within the current policy execution context.
In our continuous effort to streamline security practices, Cerbos now offers automatic detection and reloading of TLS certificates.
Policy test suites just got more flexible. You can now enable lenient scope search globally or on an individual test basis.
Cerbos now allows the use of JWTs without kid or alg claims while maintaining default secure behavior against such potentially insecure tokens.
Following recent discoveries of vulnerabilities in all public HTTP/2 implementations, we've incorporated a configuration option to limit the number of concurrent streams per gRPC connection, with a default set to 1024.
A big thank you to everyone who stopped by our booths at Kubecon + CloudNativeCon in Chicago, and Web Summit in Lisbon! Our team had a great time connecting with you and chatting about how Cerbos can help achieve your authorization goals. Those of you who attended our talks at Web Summit - thank you for your time!
Blog highlights
Kuppinger Cole identifies Cerbos as a universal solution for API authorization
Kuppinger Cole’s decision to include Cerbos in the “Leadership Compass on API and Security Management Solutions” report among larger vendors is a validation of our strength as an authorization solution. In their words: “Cerbos is an example of a vendor that only solves one specific problem but does it exceptionally well.”
Why granular, scalable control is a must for every CTO
As the digital realm continues to evolve, the strategic importance of adopting a flexible, granular, and compliant access control model cannot be overstated. ABAC stands at the helm of this evolution, offering a pathway to not only meet the current authorization challenges but also to anticipate and adeptly navigate future ones.
How to break down silos in your authorization management
Silos limit our potential and obstruct clear communication and collaboration. Breaking down these barriers in authorization management not only paves the way for technical advancements but also fosters a culture of inclusivity and shared understanding.