SHSelfHostIndex

Cerbos

Scalable, decoupled authorization service

Identity & SSO ★ 4.6k stars Medium setup Apache-2.0

Cerbos is an open-source, stateless authorization layer that decouples access control logic from application code. It is self-hosted to evaluate context-aware permission policies for any application.

Official siteSource code

Key features

  • Decoupled authorization
  • Policy as code
  • gRPC and REST APIs
  • Stateless and scalable

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Active community (4.6k GitHub stars)

Is Cerbos secure?

OSV.dev has no published security advisories for Cerbos's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

Cerbos replaces

Self-hosted Auth0 FGA alternativesSelf-hosted OPA alternatives

Health badge

Maintain Cerbos? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 89 · excellent

Markdown
[![SelfHostIndex health score for Cerbos](https://selfhostindex.com/badge/cerbos.svg)](https://selfhostindex.com/app/cerbos/)
HTML
<a href="https://selfhostindex.com/app/cerbos/"><img src="https://selfhostindex.com/badge/cerbos.svg" alt="SelfHostIndex health score for Cerbos"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/cerbos.svg
   :alt: SelfHostIndex health score for Cerbos
   :target: https://selfhostindex.com/app/cerbos/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Cerbos

6 head-to-head comparisons.

Similar identity & sso apps