Cerbos @cerbosdev

Authorization for enterprise software and AI. cerbos.dev Joined June 2021

Tweets

2K
Followers

790
Following

618
Likes

11K

Cerbos @cerbosdev

24 hours ago

Authorization runs at runtime, on every request. So where it lives matters. Get the #deployment model wrong and your audit logs sit in the wrong jurisdiction and you fail the #audit. Our new guide breaks down the models and what drives the choice ⤵️ bit.ly/4ul13fg

0 0 1 16 0

View Details

Cerbos @cerbosdev

3 days ago

An #AI support bot gave away #Instagram accounts because someone asked it nicely. No exploit, just persistence The fix isn't a better prompt. The #access decision has to live outside the model, in a layer the attacker can't talk to: bit.ly/4387h71 #Meta #Authorization

0 0 2 162 0

View Details

Cerbos @cerbosdev

4 days ago

Write #authorization #policies in #ClaudeCode by describing the permission in plain English. The skill drafts schemas, derived roles, and tests, then compiles against the real Cerbos binary before you commit. bit.ly/3RICPxR

0 0 1 50 1

View Details

Cerbos @cerbosdev

5 days ago

Agents follow #access, not instructions. If the policy lives inside the agent, the #agent will always talk itself past the gate. How #IAM and security teams should be thinking about this before the #EUAIAct deadline. bit.ly/3QgXcBL

0 1 2 142 0

View Details

Cerbos @cerbosdev

a week ago

Rivian shipped bad firmware to its fleet. Tesla's OTA disabled safety systems on 2M cars. Chevy's drained customer batteries. The connected car is an enterprise endpoint, and RBAC alone can't govern it. Guide to getting automotive authorization right: bit.ly/4vcHHts

0 0 2 50 0

View Details

Cerbos @cerbosdev

2 weeks ago

How to layer fine-grained, attribute-based #authorization on top of your #AIgateway, so you can control which models, tools, #MCP servers each user & agent can reach, and keep delegation chains from leaking privilege bit.ly/4nTyHXM

0 0 1 42 0

View Details

Cerbos @cerbosdev

2 weeks ago

Identity gets the AI agent into the building. Authorization protects the vault. @alexolivier 's #EIC2026 takeaways. Why counting agents isn't controlling them, where the decision lives, and the audit evidence the EU AI Act will ask for. bit.ly/4uz4O1i

0 2 4 112 0

View Details

Cerbos @cerbosdev

2 weeks ago

Last day of #EIC2026 4 days of conversations, 1 clear takeaway Modern identity is sorted. The hard part some teams have yet to tackle now is what users can do once authenticated, especially when agents act on their behalf (#Authorization. That's what we do) #IdentityConference

0 0 2 75 0

View Details

Cerbos @cerbosdev

2 weeks ago

Most #identitysecurity spend lands on admin time. Provisioning, role assignment, access reviews, posture management. None of it decides what happens when a token hits an API at 3am on a Sunday. That decision is #authorization 👇 bit.ly/4nISbOz

0 0 1 24 0

View Details

Cerbos @cerbosdev

2 weeks ago

Your #IdP answers "who is this person?" It doesn't answer "can they do this specific thing, to this resource, right now?" That's #authorization. Here's where identity providers fall short, and how to shortlist a dedicated authZ solution. 👇 bit.ly/49HchTC

0 0 1 47 0

View Details

Cerbos @cerbosdev

3 weeks ago

An #IdP signs a token and stamps a list of claims that every downstream system trusts for an hour. That list is an #authorization decision. Most identity teams don't manage it like one. No policy behind it. No decision log. No clear owner. bit.ly/4tOlzof

0 0 1 141 0

View Details

Cerbos @cerbosdev

3 weeks ago

Cerbos is at #eic2026 🍭Find @emre & @alexolivier at our candy bar on Level C, opposite Starter Program sponsors. Alex is also on three panels. #OpenID for the Enterprise, Signals/Policies/Identity Agency, and #AuthZEN deep dive. @kuppingercole #IdentitySecurity

0 1 2 68 0

View Details

Cerbos @cerbosdev

3 weeks ago

Your authorization is only as strong as the decision made at the moment a request arrives. Everything else is hope. New post on #runtime #authorization platforms 👇 bit.ly/3PQaNjf

0 0 1 57 0

View Details

Cerbos @cerbosdev

3 weeks ago

Most #AI agent #governance plans have a kill switch in them. In healthcare or finance, flipping it just creates the next incident. The fix is a dimmer switch. Fade access down, narrow the policy, keep the lights on. bit.ly/4danyhF #authorization

0 1 1 66 0

View Details

Cerbos @cerbosdev

3 weeks ago

The Cerbos PDP rule table index now runs on a custom #bitmap with a meta layer that proves two bitmaps don't overlap before doing any per-word work. Three months of rewrites, hot path now 6.6 µs per op. Full writeup from Sam: bit.ly/434EMqF

0 0 3 78 0

View Details

Cerbos @cerbosdev

3 weeks ago

Cerbos is at #eic2026 next week 🍬Catch our candy bar on Level C and chat authorization, AuthZEN, or AI agents. Two panels @alexolivier will be on: "Signals, Policies, and Identity Agency", "Leverage OpenID AuthZen". See you in Berlin! @kuppingercole #IdentitySecurity @emre

0 0 1 68 0

View Details

Cerbos @cerbosdev

4 weeks ago

Cerbos Newsletter May 2026 📢 bit.ly/4uIY6pg ✅Governing #AI agents ✅#Authorization management platform ✅The case for on-premise authZ ✅#AuthZEN, #SharedSignals, #SCIMEvents, and #IPSIE ✅#Claude skill for writing authZ policies Subscribe: bit.ly/3MGNwuW

0 0 1 38 0

View Details

Cerbos @cerbosdev

4 weeks ago

Notes from @alexolivier on the @openid Enterprise Panel. Shared Signals keeps data fresh. #AuthZEN turns it into a real-time decision. SCIM Events handles lifecycle. IPSIE describes what good looks like. Big gap is reference architectures. bit.ly/3QWK1pL

0 0 2 65 0

View Details

Cerbos @cerbosdev

a month ago

An agent kicks off booking a hotel and 50 tool calls later is wiring money to a Cayman account. Each call passes policy on its own. The gap between declared intent and runtime behaviour is where authorizing AI agents gets hard. @alexolivier's #IIW42 recap bit.ly/4wkzC7u

0 0 3 133 0

View Details

Cerbos @cerbosdev

a month ago

Cerbos PDP v0.52.0 and v0.53.0 are out 🚀 v0.52.0 lands meaningful performance work and new #CEL path functions, while v0.53.0 hardens the #JWT verification flow and resolves a query plan regression introduced in v0.50. Full release notes: bit.ly/4nfYFo3