Cerbos Newsletter Nov 2026 📢 bit.ly/4sLEctV

✅#AuthZEN for agent tool calls
✅Verified humans approving #AIAgents actions
✅Org-wide rules for coding agents
✅Policy checks on outbound #AI calls
✅Cerbos PDP v0.57.0 & Synapse v0.10

Subscribe: bit.ly/3MGNwuW

A jump box approval covers getting onto the box, not what happens once you’re on it

We wrote up how to grant API access limited by endpoint, account, time and call count instead, with every call logged, and where PAM still fits:
🔐✍️ bit.ly/4ipGGuG

#PAM #authorization

We’ve partnered with @iProov so a named person approves high-stakes #AI agent actions, like large payments, before they run.

We wrote up which actions should need sign-off and what ends up in your audit trail: bit.ly/4zlkSWY

#AIAgents #authorization

A poisoned support ticket tells your AI agent to leak your customer list. A prompt can't stop it. A policy can.

@alexolivier explained how on @SCMagazine's Application Security Weekly. We wrote up the policy & where LLMs fit in authz: bit.ly/4e5mJGS

#AuthZEN #AIAgents

An intern with CRM access won't open HR or finance. An #AI agent with the same access tries everything it can reach

@alexolivier explained why on Code Story

We wrote up the main ideas, like why agents need a check at every hop: bit.ly/4yQdguG

#AIAgents #authorization

Many #SupplyChain breaches start with compromised identities, not tampered code.

Oct 28 at #ISC2Congress, @alexolivier and @Apple's Vatsal Gupta show how to find identity attack paths in CI/CD and segment NHIs to cut blast radius.
…6isc2securitycongress.eventscribe.net/agenda.asp?pfp…

#IAM @ISC2

Cerbos PDP v0.57.0 is out 🚀

Query plans now keep standalone has() checks, so your database applies the same test Cerbos does, and large policy stores keep serving requests during full reloads.

Details: bit.ly/4eNdPOm

#authorization

Weighing #Cerbos after Tiny acquired #Oso Cloud? We wrote up how the two compare.

Both handle roles, attributes and relationships, so most #Polar rules carry over. The real change is where your data lives and where decisions run.

👉 bit.ly/3UBSaSA

#authorization #abac

An internal AI agent can read files, search the web and query company data with nobody approving each step.

We wrote up how we check every step with #Cerbos, plus the policy and audit design to reuse on your own #MCP server.

🗒️ bit.ly/4eoJOV1

#authorization

78% of organizations have no documented policy for creating or removing #AI identities.

We wrote up how to fix that: an owner for every agent, credentials that expire, and an #authorization check on every action it takes.
🛡️👉 bit.ly/4hPTCtm

#IAM #AIAM

Cerbos Newsletter October 2026 📢 bit.ly/4je6cUu

✅Who owns #authorization in a large org
✅A #ZeroTrust stack, layer by layer
✅Why #audit trails break between #AIAgents
✅Cerbos PDP v0.56.0

Subscribe: bit.ly/3MGNwuW

Enterprise #IAM is 5 domains. #SSO, #IGA, #PAM and machine identity get the budget. The 5th, #authorization, what an identity may do per request, is what most programs leave hardcoded in each app.

Guide to all 5, vendors in each, what to get first: bit.ly/3TtbCR7

Ask who owns #authorization at a company with 500 engineers and you get 3 teams holding a piece each, and no owner.

We wrote up how to split ownership by layer, with a table to bring to the meeting where those teams argue about it.

✍️💡 bit.ly/4i5JD38

#IAM

Cerbos PDP v0.56.0 is out 🚀

Store reloads can now confirm new policies have compiled and are being served, and a new metric tracks the last successful rule table refresh.

We wrote up every change: bit.ly/4yCmeMK

#authorization #CICD

Our CPO @alexolivier will be at @WeAreDevs 🔊on why authorization spread across many services breaks at scale

Come if your permission checks live in more than one place. You'll leave with the warning signs and a checklist to fix them 🔒

wearedevelopers.com/world-congress…

#WeAreDevelopers

The Cerbos PDP dashboard is now on @grafana 🎉
We rebuilt it on the #Prometheus metrics the PDP has always exposed.

Import ID 25769 and you get per-instance health, Hub connectivity, policy count, latency percentiles and restart annotations.

grafana.com/grafana/dashbo…

入社してから担当していた認可基盤の移行が完了したのでブログ書きました 👍
認可エンジンのCerbosを選定した理由や、
認可基盤の移行について気になる方はご覧ください！

tech.acesinc.co.jp/entry/2026/09/…

ACES moved #authorization for ACES Meet onto Cerbos and wrote up how they did it step by step.

Dual writes, a shadow run against production traffic, then cutover. Useful if you're planning the same move off in-app permission checks. Thank you @nori_nori_8! #

An #agent exports a record it shouldn't have.

The logs say a service account. Not the user, not the agent, not the sub-agent.

We wrote up why the trail goes dark at the handoff and the 4 things every hop has to log so it doesn't: 🛡️ bit.ly/4iRYEXa

#authorization #ai

Cerbos Newsletter Sept 2026 📢 bit.ly/4h1feRV

✅Takeaways from #IdentityWeek America
✅Vetting checklist for #MCP servers
✅Delegated authz
✅New Cerbos Hub interface
✅[eBook] The #Authorization Maturity Model: A Benchmark for 2026

Subscribe: bit.ly/3MGNwuW