惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

阮一峰的网络日志
阮一峰的网络日志
Blog — PlanetScale
Blog — PlanetScale
B
Blog RSS Feed
L
LangChain Blog
Jina AI
Jina AI
爱范儿
爱范儿
C
Check Point Blog
云风的 BLOG
云风的 BLOG
Last Week in AI
Last Week in AI
月光博客
月光博客
GbyAI
GbyAI
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Stack Overflow Blog
Stack Overflow Blog
V
V2EX
A
About on SuperTechFans
有赞技术团队
有赞技术团队
Microsoft Azure Blog
Microsoft Azure Blog
The GitHub Blog
The GitHub Blog
博客园 - Franky
Apple Machine Learning Research
Apple Machine Learning Research
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google DeepMind News
Google DeepMind News
博客园 - 三生石上(FineUI控件)
S
SegmentFault 最新的问题

Cerbos - All Posts

Authentik vs Keycloak: Self-hosted IdP comparison Mapping business requirements to authorization policy for automotive Fine-grained authorization for AI gateways EIC 2026: Stop counting agents, protect what they can touch Agent skill for writing authorization policies in Claude Desktop Identity security in 2026 EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents Already have authentication? Here's the authorization layer you still need. Tokens are authorization decisions: a guide to policy-driven token issuance What is a Runtime Authorization Platform It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governance From maps to bitmaps (and from bitmaps to bitmaps) AuthZEN, Shared Signals, SCIM Events, IPSIE: Notes from the OpenID Enterprise Panel How do you update authorization policies without redeploying your application? IIW42 recap: Where agent authorization got real Cerbos PDP v0.52.0/v0.53.0: Engine performance, security hardening, and CEL path functions Authorization Management Platforms: what they do, how they work, and where they fit PocketOS AI coding agent deleted a production database in 9 seconds Non-Human Identity management still has a blind spot Supabase alternative in 2026: Best open source auth options Benefits of on-premise authorization: Why enterprises are moving toward self-hosted Authorization policies: How to write, test, and validate them (faster with AI) Agent skill for writing authorization policies How much does it cost to build authorization in-house? Why centralized authorization governance reduces incident response time OPA alternative Why AI agents make authorization a right now problem Modernizing legacy application authorization: why it’s your biggest security blind spot How to add authorization to legacy applications without code changes 5 authorization blind spots auditors find, and how to fix them
Cerbos achieves SOC 2 Type II compliance
Anna Paykina · 2024-01-10 · via Cerbos - All Posts

Cerbos has achieved SOC 2 Type II compliance in accordance with the American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations, also known as SSAE 18. This accomplishment underscores our unwavering commitment to data security and compliance.

Understanding SOC 2 Type II compliance

SOC 2 compliance revolves around effectively managing client data, grounded in the five Trust Service Principles: security, availability, processing integrity, confidentiality, and privacy. The SOC 2 Type II report provides an in-depth evaluation of a service provider's internal controls and systems in these areas, and delves into the intricate details of the infrastructure, software, people, data, and procedures over an intended period of time.

Significance for Cerbos’ customers

This compliance is more than a badge of honor; it's a testament to our dedication to safeguarding customer data. By achieving SOC 2 Type II compliance, we assure our customers that their sensitive information, as well as authorization roles, permissions, and access rules - critical components of our users’ applications, and are handled adhering to the highest standards of security and compliance.

Our compliance means that every aspect of our service - from infrastructure to personnel - has been rigorously evaluated and deemed secure. This provides our customers with the peace of mind that their data is not just handled, but protected by a verified system.

A tangible example of how our customers benefit from this compliance is through enhanced security measures. For instance, our process monitoring and intrusion detection systems significantly reduce the risk of data breaches. This means that when a customer uses Cerbos to manage access controls, they're not only streamlining their operations but are also operating within a highly secure ecosystem.

In summary, Cerbos' achievement of SOC 2 Type II compliance is not just a milestone for us; it's a direct benefit to our customers. It stands as a testament to our commitment to security, providing our users with a reliable solution.