惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
H
Help Net Security
Jina AI
Jina AI
T
The Blog of Author Tim Ferriss
宝玉的分享
宝玉的分享
博客园 - 叶小钗
Y
Y Combinator Blog
罗磊的独立博客
大猫的无限游戏
大猫的无限游戏
WordPress大学
WordPress大学
C
Check Point Blog
Recent Announcements
Recent Announcements
IT之家
IT之家
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
美团技术团队
云风的 BLOG
云风的 BLOG
雷峰网
雷峰网
H
Hackread – Cybersecurity News, Data Breaches, AI and More
S
SegmentFault 最新的问题
MyScale Blog
MyScale Blog
Apple Machine Learning Research
Apple Machine Learning Research
Microsoft Azure Blog
Microsoft Azure Blog
V
Visual Studio Blog
B
Blog

Cerbos - All Posts

Authentik vs Keycloak: Self-hosted IdP comparison Mapping business requirements to authorization policy for automotive Fine-grained authorization for AI gateways EIC 2026: Stop counting agents, protect what they can touch Agent skill for writing authorization policies in Claude Desktop Identity security in 2026 EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents Already have authentication? Here's the authorization layer you still need. Tokens are authorization decisions: a guide to policy-driven token issuance What is a Runtime Authorization Platform It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governance From maps to bitmaps (and from bitmaps to bitmaps) AuthZEN, Shared Signals, SCIM Events, IPSIE: Notes from the OpenID Enterprise Panel How do you update authorization policies without redeploying your application? IIW42 recap: Where agent authorization got real Cerbos PDP v0.52.0/v0.53.0: Engine performance, security hardening, and CEL path functions Authorization Management Platforms: what they do, how they work, and where they fit PocketOS AI coding agent deleted a production database in 9 seconds Non-Human Identity management still has a blind spot Supabase alternative in 2026: Best open source auth options Benefits of on-premise authorization: Why enterprises are moving toward self-hosted Authorization policies: How to write, test, and validate them (faster with AI) Agent skill for writing authorization policies How much does it cost to build authorization in-house? Why centralized authorization governance reduces incident response time OPA alternative Why AI agents make authorization a right now problem Modernizing legacy application authorization: why it’s your biggest security blind spot How to add authorization to legacy applications without code changes 5 authorization blind spots auditors find, and how to fix them
Authorization trends 2023: Delegation to specialized solu...
Emre Baran · 2023-01-28 · via Cerbos - All Posts

Authorization is still a brand new space and we saw lots of solutions launching with different approaches to tackling authorization delivering on RBAC, ABAC, and ReBAC. A common thread with all these solutions has been the decoupling of the logic from the application code base out into a standalone service that makes decisions for the entire application. This approach allows the logic to evolve independently of the code base and fits in perfectly with today’s heterogeneous service landscapes.

At Cerbos, we have a keen understanding of the direction that the authorization space is heading in. When it comes to forecasts for 2023, we believe that the trend in the industry is moving towards a focus on core competencies and a delegation of other responsibilities to specialized software. Within this context, we see authorization as an area that should be delegated to specialized software solutions, with a preference for those that are built in an open-source ecosystem.

Cloud-native technology has become firmly established and we anticipate that more and more companies will be looking to this ecosystem to address their authorization needs. Additionally, we expect to see an increase in security products that utilize machine learning models for anomaly and threat detection, with some of these products potentially being able to analyze access logs and make suggestions for access policies.

We also anticipate a shift towards more natural language processing in enterprise software, with the introduction of chatbot-like assistants similar to ChatGPT.

In terms of cybersecurity, we expect to see a wider adoption of the WebAuthn standard and more secure login methods than simple passwords. Furthermore, we expect that there will be much greater decoupling of components with serverless and on-demand scale-up service providers coming to the fore with the likes of Netlify, Vercel, Fly.io, Neon and Upstash that cover not just frontend stacks but backend and data processing stacks as well.

Overall, we see a bright future for the authorization space, with advancements in technology and an increasing focus on specialized solutions driving innovation and progress.