Cerbos
Apache-2.0 authZ PDP: YAML policies, run anywhere
Auth / AuthZ · Apache-2.0 · 4.6k
What's Good
Apache-2.0. Free forever Run anywhere — verified on cerbos.dev/pricing. YAML policies, PDP you embed or sidecars. Decouples authZ from whatever issues the tokens.
The Catch
authZ YAML PDP — not authentik/Keycloak/Better Auth authN/IdP. Do not reprint Hub prices; self-host PDP is the free path. Distinct from authentik, Keycloak, and Better Auth.
Verdict
Apache-2.0 authorization PDP. Free to run; not an IdP.
Embed
[](https://stackgems.com/gems/cerbos)