Emre

ACES moved #authorization for ACES Meet onto Cerbos and wrote up how they did it step by step. Dual writes, a shadow run against production traffic, then cutover. Useful if you're planning the same move off in-app permission checks. Thank you @nori_nori_8! #

Most "#Keycloak alternative" lists mix four products. An authentication gateway, an OAuth server, a full #IdP and a policy engine solve different problems. We wrote up which fits which requirement, and when swapping IdP fixes nothing: 🔗 bit.ly/4h5MBEf #IAM

If your #agent chain forwards the user's access token to the next hop, you're not delegating. You're #impersonating. We wrote up what a chain that holds together looks like, a checklist to test your own design against & which standards are ready now. 🔗🛡️bit.ly/4gyFYce

Spin up an #AIagent and it needs a model to think with and tools to act with. Which model can it call? Which #MCP servers can it even open? Are the tool-call arguments inside policy? How #agentgateway + Cerbos decide all three at the gateway: bit.ly/43qNy2E

Agents follow #access, not instructions. If the policy lives inside the agent, the #agent will always talk itself past the gate. How #IAM and security teams should be thinking about this before the #EUAIAct deadline. bit.ly/3QgXcBL

Identity gets the AI agent into the building. Authorization protects the vault. @alexolivier 's #EIC2026 takeaways. Why counting agents isn't controlling them, where the decision lives, and the audit evidence the EU AI Act will ask for. bit.ly/4uz4O1i

The message from #ISC2Congress 2025 is clear: policy as code is the only way forward Continuous compliance, AI governance, and risk quantification are no longer optional Security teams need policies that deploy and test like software Read more🔗bit.ly/43f6W2T @ISC2

Moving to #microservices? #Authorization gets complex fast. Our new guide covers workload identity, on-behalf-of authorization patterns, and real policy examples for securing service-to-service calls and AI agents. #Zerotrust made practical 👉 bit.ly/4nTDzeu

Adopting externalized authorization is a big shift. We turned lessons from helping hundreds of teams, into a 10-chapter guide covering everything from planning to rollout to governance. 📘 Get the “How to Adopt Externalized Authorization” ebook: bit.ly/4lisId5

🤔 Cloud, SaaS, or self-hosted? Which model is right for you? Join our #webinar with @FusionAuth on choosing the right authentication & authorization deployment model. 🎙️ @mooreds & @alexolivier Register here: bit.ly/4hy57SR #authentication #authorization #Cerbos

#NonHumanIdentities outnumber human users by 17:1, yet they are one of the most overlooked attack vectors. We published a new blog post breaking down the #OWASP Top 10 threats to #NHIs: What each threat is, examples of breaches, steps to mitigate them. bit.ly/4l80Pom

Are you attending DevWorld Amsterdam? If so - stop by booth 5C tomorrow to meet our team, talk about permission management, and take on the Cerbos game! (🤔 🏅 can you beat the top score?) @emre @phrawzty @alexolivier #devworld #conference

Statements about stateless - what happens when architectural theory meets real-world practice? 👉 bit.ly/4jDCOof @phrawzty discusses the core principles, advantages & disadvantages, and practical concerns of #stateless #architecture #Cerbos #authorization