Cerbos PDP v0.57.0 is out 🚀 Query plans now keep standalone has() checks, so your database applies the same test Cerbos does, and large policy stores keep serving requests during full reloads. Details: bit.ly/4eNdPOm #authorization

Weighing #Cerbos after Tiny acquired #Oso Cloud? We wrote up how the two compare. Both handle roles, attributes and relationships, so most #Polar rules carry over. The real change is where your data lives and where decisions run. 👉 bit.ly/3UBSaSA #authorization #abac

An internal AI agent can read files, search the web and query company data with nobody approving each step. We wrote up how we check every step with #Cerbos, plus the policy and audit design to reuse on your own #MCP server. 🗒️ bit.ly/4eoJOV1 #authorization

78% of organizations have no documented policy for creating or removing #AI identities. We wrote up how to fix that: an owner for every agent, credentials that expire, and an #authorization check on every action it takes. 🛡️👉 bit.ly/4hPTCtm #IAM #AIAM

Cerbos Newsletter October 2026 📢 bit.ly/4je6cUu ✅Who owns #authorization in a large org ✅A #ZeroTrust stack, layer by layer ✅Why #audit trails break between #AIAgents ✅Cerbos PDP v0.56.0 Subscribe: bit.ly/3MGNwuW

Enterprise #IAM is 5 domains. #SSO, #IGA, #PAM and machine identity get the budget. The 5th, #authorization, what an identity may do per request, is what most programs leave hardcoded in each app. Guide to all 5, vendors in each, what to get first: bit.ly/3TtbCR7

Ask who owns #authorization at a company with 500 engineers and you get 3 teams holding a piece each, and no owner. We wrote up how to split ownership by layer, with a table to bring to the meeting where those teams argue about it. ✍️💡 bit.ly/4i5JD38 #IAM

Cerbos PDP v0.56.0 is out 🚀 Store reloads can now confirm new policies have compiled and are being served, and a new metric tracks the last successful rule table refresh. We wrote up every change: bit.ly/4yCmeMK #authorization #CICD

Our CPO @alexolivier will be at @WeAreDevs 🔊on why authorization spread across many services breaks at scale Come if your permission checks live in more than one place. You'll leave with the warning signs and a checklist to fix them 🔒 wearedevelopers.com/world-co… #WeAreDevelopers

The Cerbos PDP dashboard is now on @grafana 🎉 We rebuilt it on the #Prometheus metrics the PDP has always exposed. Import ID 25769 and you get per-instance health, Hub connectivity, policy count, latency percentiles and restart annotations. grafana.com/grafana/dashboar…

ACES moved #authorization for ACES Meet onto Cerbos and wrote up how they did it step by step. Dual writes, a shadow run against production traffic, then cutover. Useful if you're planning the same move off in-app permission checks. Thank you @nori_nori_8! #

An #agent exports a record it shouldn't have. The logs say a service account. Not the user, not the agent, not the sub-agent. We wrote up why the trail goes dark at the handoff and the 4 things every hop has to log so it doesn't: 🛡️ bit.ly/4iRYEXa #authorization #ai

Cerbos Newsletter Sept 2026 📢 bit.ly/4h1feRV ✅Takeaways from #IdentityWeek America ✅Vetting checklist for #MCP servers ✅Delegated authz ✅New Cerbos Hub interface ✅[eBook] The #Authorization Maturity Model: A Benchmark for 2026 Subscribe: bit.ly/3MGNwuW

Authorization bugs do more than leak data. At scale they become outages and stuck workflows. Our CPO @alexolivier covers catching them early at #WeAreDevelopers World Congress, Sept 24. You'll leave with a checklist for making #authorization predictable. wearedevelopers.com/world-co…

Same AI agent question at #IdentityWeekAmerica, whatever the badge said. Who's asking & what can it touch? @alexolivier wrote up panel takeaways, who should own an agent, and which actions get a spend limit, a human in the loop, or a hard approval 🔗🤖 bit.ly/46e0fPx

A role can't say "read this record, only while acting for the user who owns it, only for this task, only right now." That's why #agent #delegation needs a policy decision at every hop, not just the edge. How per-hop #authorization works 👉 bit.ly/4yfwf1G

Most "#Keycloak alternative" lists mix four products. An authentication gateway, an OAuth server, a full #IdP and a policy engine solve different problems. We wrote up which fits which requirement, and when swapping IdP fixes nothing: 🔗 bit.ly/4h5MBEf #IAM

Booth 720 at Identity Week America has been busy, and it's been good to meet so many of you 😀! @alexolivier and @emre are there for the rest of the show. Come talk permissions, policy design, or keeping AI agents inside their limits. #IdentityWeekAmerica #IAM

Your board told you to adopt #AI agents. You're the one accountable when one does something nobody predicted. We wrote up the 7 layers of AI agent security, the tools in each, and the layer most stacks skip. bit.ly/4y8N7Hf #AIsecurity #AIagents