Dev tools · alternatives · 2026
24 alternatives to Cerbos Hub - Authorization Management System
Hello HN! I'm on the DevRel team at Cerbos (https://cerbos.dev/), a tool designed to manage who can do what in your software applications. For a couple of years now, Open Worldwide Application Security Project (OWASP) is naming authorization a top 10 API security risk: https://owasp.org/API-Security/editions/2023/en/0x11-t10/ We are thrilled to announce that Cerbos Hub is now in public beta! Join the beta and help us shape the future of authZ: https://hub.cerbos.cloud/ Cerbos Hub is a managed service offering for the open…
Cerbos Hub is a managed authorization service that controls who can access what in software applications. It is built on the open-source Cerbos project and serves development teams building web-scale applications. The… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Cerbos Hub - Authorization Management System launched in 2023; newer entries below may have overtaken it.
- 1
Cerbos PDP, policy decision point, is an open source authorization layer that can evolve as your product grows. It enables developers to define powerful, context-aware access control in simple, intuitive, and testable policies. Cerbos runs in your own environment. We started working on Cerbos[0] over 3 years ago. Permission management across applications is difficult, especially as the code base grows: you have hundreds of users, many services in different languages, and several environments. Hardcoded access control rules tangled with business logic make every new role and permission change…
2024 · github.com · its alternatives →
- 2
Permit.io▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal
2023 · permit.io · its alternatives →
- 3
- 4
Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
2022 · github.com · its alternatives →
- 5
- 6
- 7
AccessOwl 2.0▲369Discover and manage your teams SaaS access
2023 · accessowl.com · its alternatives →
- 8
- 9
Skip migration and launch MCP with built-in Auth
Nov 2025 · arcade.dev · its alternatives →
- 10
- 11
Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
2023 · aserto.com · its alternatives →
- 12
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 13OS
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is…
2022 · its alternatives →
- 14
- 15
Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
2024 · github.com · its alternatives →
- 16
The easiest 3rd-party sign-in for your apps and APIs
2020 · its alternatives →
- 17
keychains.dev▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
Feb 2026 · keychains.dev · its alternatives →
- 18
- 19
- 20
Hey HN, I built this over the last year as I always wanted to have an easy file and terminal access to all of my servers, including containers and clusters that you normally can't connect to with existing solutions out of the box. At first glance it might not look very novel, but if you dig a little deeper, you will see that the entire foundation of how it communicates with remote systems is completely different from any other solution out there. What happens in the background can essentially be explained this way: It launches a local shell process like cmd, sh, etc. and in it executes a…
2024 · xpipe.io · its alternatives →
- 21
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
- 22
An admin-friendly, User Management Server (with Passkeys & JWTs) - for seamless and secure integration of user authentication - authcompanion/authcompanion2
2023 · github.com · its alternatives →
- 23
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 24
Hey HN, we just shipped a browser with an inbuilt MCP server! We're a YC startup (S24) building BrowserOS — an open‑source Chromium fork. We're a privacy‑first alternative to the new wave of AI browsers like Dia, Perplexity Comet. Since launching ~3 months ago, the #1 request has been to expose our browser as an MCP server. -- Google beat us to launch with chrome-devtools-mcp (solid product btw), which lets you build/debug web apps by connecting Chrome to coding assistants. But we wanted to take this a step further: we packaged the MCP server directly into our browser binary. That gives…
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →