Cerbos Hub - Authorization Management System
Hello HN! I'm on the DevRel team at Cerbos (https://cerbos.dev/), a tool designed to manage who can do what in your software applications. For a couple of years now, Open Worldwide Application Security Project (OWASP) is naming authorization a top 10 API security risk: https://owasp.org/API-Security/editions/2023/en/0x11-t10/ We are thrilled to announce that Cerbos Hub is now in public beta! Join the beta and help us shape the future of authZ: https://hub.cerbos.cloud/ Cerbos Hub is a managed service offering for the open…
Cerbos Hub - Authorization Management System launched on November 6, 2023 with 11 votes, #1,398 of 4,332 launches that month and more than 75% of that year's launches.
In plain words
Cerbos Hub is a managed authorization service that controls who can access what in software applications. It is built on the open-source Cerbos project and serves development teams building web-scale applications. The system addresses authorization as a documented API security risk, providing centralized permission management across applications.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hello HN! I'm on the DevRel team at Cerbos (https://cerbos.dev/), a tool designed to manage who can do what in your software applications. For a couple of years now, Open Worldwide Application Security Project (OWASP) is naming authorization a top 10 API security risk…
Does a similar job
all alternatives →
Cerbos. Open source, horizontally scalable, stateless authorization2024 · github.com · ▲24Cerbos PDP, policy decision point, is an open source authorization layer that can evolve as your product grows. It enables developers to define powerful, context-aware access control in simple, intuitive, and testable policies. Cerbos runs in your own environment. We started working on Cerbos[0] over 3 years ago. Permission management across applications is difficult, especially as the code base grows: you have hundreds of users, many services in different languages, and several environments. Hardcoded access control rules tangled with business logic make every new role and permission change…
Permit.io2023 · permit.io · ▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal

Topaz: open-source authorization combining the best of OPA and Zanzibar2022 · github.com · ▲132Cloud-native authorization for modern applications and APIs - aserto-dev/topaz

Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar2023 · aserto.com · ▲35Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
More dev tools this month
the category →

open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com

Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, November 2023
the whole month →

Discover & book top creators to promote your product
Growth · 2023 · passionfroot.me



SpeedVitals▲829Hi HN, I’m Kashish, one of the co-founders of SpeedVitals, a platform for testing & monitoring website performance with a major emphasis on Core Web Vitals. Until now, our platform has only focused on Synthetic/Lab testing, such as Lighthouse tests and TTFB tests. But now, we have developed a Real-User Monitoring platform that doubles up as a Web Analytics tool. One major feature we have that most RUM tools lack is Performance Audits. Just like Lighthouse audits work on Lab test data, our audits work across all the real-user visits and gives suggestions on what task to prioritize first.…
Dev tools · 2023 · speedvitals.com