cerbos

★ 4.6k

A self-hosted alternative to Auth0

Apache License 2.0Open Source — No PaywallDocker · Binary · Package +1Telemetry: Opt-Out9+ active committers (12mo)

About

Cerbos is a self-hosted authorization system designed to sit between an application and its access-control logic. It helps teams define permissions in YAML policies and evaluate those policies at...

Live Demo Source Code Docs Website

Community Ratings

No ratings yet

New this week

Read recap →

Weekly Recap — Oct 23, 2026 – Oct 30, 2026Oct 30, 2026

Features

context-aware access control rules
YAML policy authoring
GitOps-managed deployment
policy evaluation APIs
CheckResources API
PlanResources API
derived roles
principal policies
SDK integrations
query plan adapters

Details

Last Updated: Oct 29, 2026
Created: Mar 21, 2021
Install Methods: dockerbinarypackage-managerhelm
Requirements: Go runtime
Authentication: local
API: REST
Runtime / Stack: GodebDockerK8S
Privacy & Independence: Telemetry: Opt-outCloud: Optional
User Model: Multi-User
Deployment: Deployment: no container deployment found

Run cerbos yourself

Pick how much you want to manage.

HetznerBest match
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a Hetzner server(opens in a new tab)
DigitalOcean
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a DigitalOcean server(opens in a new tab)
OVHcloud
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a OVHcloud server(opens in a new tab)

Is this your project? Sponsor a listing

Related Software

Stack Auth

6.9k

Stack Auth is an open-source authentication platform that provides sign-in, user management, authorization, and related auth features for web apps.

Authentication ServicesPermissive LicenseCopyleft License+1

authentik

26.2k

authentik is an open-source identity provider for modern SSO that supports SAML, OAuth2/OIDC, LDAP, RADIUS, and related identity management use cases.

Authentication ServicesPermissive LicenseProxy Servers+1

3 ContainersOpen Core

Tyk

10.9k

Tyk Gateway is an open source, cloud-native API gateway for managing, securing, and monitoring APIs across REST, GraphQL, TCP, and gRPC protocols.

API ManagementProxy ServersAnalytics Tools+2

Hasura

32.1k

An open source GraphQL engine that provides a single secure API endpoint for accessing data and building modern applications.

API ManagementPermissive LicenseDatabase Management

6 Containers

Cardea

An SSH bastion server with access control, session recording, and optional TPM-backed key protection.

Remote Access

3 Containers

Nona

Nona is a self-hosted feature flag and remote configuration platform for web, mobile, and backend applications.

Self Hosting SolutionsFully FOSSFeature Toggles

2 ContainersFully FOSS

bor

166

Bor is an open-source policy management system for Linux desktops that centrally distributes and enforces configuration policies on enrolled endpoints in real time.

Automation ToolsSelf Hosting SolutionsAuthentication Services+1

Fully FOSS

TrailBase

5.7k

TrailBase is a single-executable Firebase alternative with type-safe REST and realtime APIs, built for self-hosted applications.

Low Code DevelopmentSelf Hosting SolutionsDatabase Management+4

PocketBase

61.6k

PocketBase is an open source Go backend with an embedded SQLite database, realtime subscriptions, built-in files and user management, an admin dashboard, and a simple REST-ish API.

Low Code DevelopmentPermissive LicenseDatabase Management+3

Flipt

4.9k

Flipt v2 is a Git-native feature management platform for storing, versioning, and deploying feature flags alongside code.

Feature TogglesCopyleft LicenseAutomation Tools+2

Open CoreTelemetry: Opt-Out

agent-vault

2.5k

An open-source HTTP credential proxy and vault that brokers API credentials for AI agents without exposing the secrets directly to the agents.

Secret ManagementProxy ServersSelf Hosting Solutions+2

2 Containers

Databunker

1.5k

Databunker is a self-hosted Go-based vault for tokenizing and securely storing personal records such as PII, PHI, and KYC data.

Database ManagementSecret ManagementConsent Management+2

Single Container