Cerbos

Authorization for enterprise software and AI.

[Cerbos @cerbosdev]

🚀🥳#CerbosHub has successfully transitioned from Beta to #GeneralAvailability!

Huge thank you to our community for your support, and to 500+ organizations that have put their trust into Cerbos Hub! 🧡

Find out more: https://t.co/c9XCP2ltoJ

#Cerbos #GA #Authorization

[Cerbos @cerbosdev]

An #AI support bot gave away #Instagram accounts because someone asked it nicely. No exploit, just persistence

The fix isn't a better prompt. The #access decision has to live outside the model, in a layer the attacker can't talk to: https://t.co/DRZ658LxMv

#Meta #Authorization

[Cerbos @cerbosdev]

Write #authorization #policies in #ClaudeCode by describing the permission in plain English.

The skill drafts schemas, derived roles, and tests, then compiles against the real Cerbos binary before you commit.

https://t.co/YzzwxgkWzi

[Cerbos @cerbosdev]

Agents follow #access, not instructions. If the policy lives inside the agent, the #agent will always talk itself past the gate.

How #IAM and security teams should be thinking about this before the #EUAIAct deadline.

https://t.co/35YayXbewa

[Cerbos @cerbosdev]

Rivian shipped bad firmware to its fleet. Tesla's OTA disabled safety systems on 2M cars. Chevy's drained customer batteries.

The connected car is an enterprise endpoint, and RBAC alone can't govern it.

Guide to getting automotive authorization right: https://t.co/3sPiDbaCLX

[Cerbos @cerbosdev]

How to layer fine-grained, attribute-based #authorization on top of your #AIgateway, so you can control which models, tools, #MCP servers each user & agent can reach, and keep delegation chains from leaking privilege

https://t.co/oMD21Uew0l

[Cerbos @cerbosdev]

Identity gets the AI agent into the building. Authorization protects the vault.

@alexolivier 's #EIC2026 takeaways. Why counting agents isn't controlling them, where the decision lives, and the audit evidence the EU AI Act will ask for.

https://t.co/5RjyJ2FxRF

[Cerbos @cerbosdev]

Last day of #EIC2026

4 days of conversations, 1 clear takeaway

Modern identity is sorted. The hard part some teams have yet to tackle now is what users can do once authenticated, especially when agents act on their behalf (#Authorization. That's what we do)

#IdentityConference

[Cerbos @cerbosdev]

Most #identitysecurity spend lands on admin time. Provisioning, role assignment, access reviews, posture management.

None of it decides what happens when a token hits an API at 3am on a Sunday. That decision is #authorization 👇

https://t.co/1yLffPSEjJ

[Cerbos @cerbosdev]

Your #IdP answers "who is this person?"

It doesn't answer "can they do this specific thing, to this resource, right now?"

That's #authorization. Here's where identity providers fall short, and how to shortlist a dedicated authZ solution. 👇

https://t.co/5cpSYXhS3O

[Cerbos @cerbosdev]

An #IdP signs a token and stamps a list of claims that every downstream system trusts for an hour.

That list is an #authorization decision. Most identity teams don't manage it like one.

No policy behind it. No decision log. No clear owner.

https://t.co/c1a9EdEoM8

[Cerbos @cerbosdev]

Cerbos is at #eic2026

🍭Find @emre & @alexolivier at our candy bar on Level C, opposite Starter Program sponsors.

Alex is also on three panels. #OpenID for the Enterprise, Signals/Policies/Identity Agency, and #AuthZEN deep dive.

@kuppingercole #IdentitySecurity

[Cerbos @cerbosdev]

Your authorization is only as strong as the decision made at the moment a request arrives. Everything else is hope.

New post on #runtime #authorization platforms 👇
https://t.co/FI2VSMZ6fE

[Cerbos @cerbosdev]

Most #AI agent #governance plans have a kill switch in them. In healthcare or finance, flipping it just creates the next incident. The fix is a dimmer switch. Fade access down, narrow the policy, keep the lights on.

https://t.co/qsTzX0proc

#authorization

[Cerbos @cerbosdev]

The Cerbos PDP rule table index now runs on a custom #bitmap with a meta layer that proves two bitmaps don't overlap before doing any per-word work.

Three months of rewrites, hot path now 6.6 µs per op.

Full writeup from Sam: https://t.co/qrvGGjyN5M

[Cerbos @cerbosdev]

Cerbos is at #eic2026 next week

🍬Catch our candy bar on Level C and chat authorization, AuthZEN, or AI agents.

Two panels @alexolivier will be on: "Signals, Policies, and Identity Agency", "Leverage OpenID AuthZen".

See you in Berlin!

@kuppingercole #IdentitySecurity @emre

[Cerbos @cerbosdev]

Cerbos Newsletter May 2026 📢 https://t.co/Wis3E8Lyxi

✅Governing #AI agents
✅#Authorization management platform
✅The case for on-premise authZ
✅#AuthZEN, #SharedSignals, #SCIMEvents, and #IPSIE
✅#Claude skill for writing authZ policies

Subscribe: https://t.co/zY11eS9k4Q

[Cerbos @cerbosdev]

Notes from @alexolivier on the @openid Enterprise Panel.

Shared Signals keeps data fresh. #AuthZEN turns it into a real-time decision. SCIM Events handles lifecycle. IPSIE describes what good looks like.

Big gap is reference architectures.

https://t.co/F74mgmyF13

[Cerbos @cerbosdev]

An agent kicks off booking a hotel and 50 tool calls later is wiring money to a Cayman account. Each call passes policy on its own. The gap between declared intent and runtime behaviour is where authorizing AI agents gets hard.

@alexolivier's #IIW42 recap https://t.co/RZq6clEa6V

[Cerbos @cerbosdev]

Cerbos PDP v0.52.0 and v0.53.0 are out 🚀

v0.52.0 lands meaningful performance work and new #CEL path functions, while v0.53.0 hardens the #JWT verification flow and resolves a query plan regression introduced in v0.50.

Full release notes: https://t.co/s9lKMJ1irq

[Cerbos @cerbosdev]

"can this user do X on this resource right now"

If answering that means grepping three services, 2 YAML configs, a 2022 access ticket - you've seen why #AuthorizationManagementPlatform s are emerging

What they are, how they work, where they fit: https://t.co/id4vhUj4lz

#AMP