Cerbos
Apache-2.0 authZ PDP: YAML policies, run anywhere
Auth / AuthZ · Apache-2.0 · 4.6k
Reviewed 2026-09-04 · last push 2026-10-21 · repo checked 2026-10-21
What's Good
Apache-2.0. Free forever Run anywhere — verified on cerbos.dev/pricing. YAML policies, PDP you embed or sidecars. Decouples authZ from whatever issues the tokens.
The Catch
authZ YAML PDP — not authentik/Keycloak/Better Auth authN/IdP. Check current Hub prices on the vendor site; self-host PDP is the free path. Distinct from authentik, Keycloak, and Better Auth.
Verdict
Apache-2.0 authorization PDP. Free to run; not an IdP.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/cerbos)
HTML
<a href="https://stackgems.com/gems/cerbos"><img src="https://stackgems.com/badge/cerbos.svg" alt="Cerbos reviewed on Stack Gems" height="20"></a>