Cerbos

@cerbosdev

Authorization for enterprise software and AI.

Cerbos
@cerbosdev
Oct 29
We’ve partnered with @iProov so a named person approves high-stakes #AI agent actions, like large payments, before they run. We wrote up which actions should need sign-off and what ends up in your audit trail: bit.ly/4zlkSWY #AIAgents #authorization
Cerbos
@cerbosdev
Oct 28
A poisoned support ticket tells your AI agent to leak your customer list. A prompt can't stop it. A policy can. @alexolivier explained how on @SCMagazine's Application Security Weekly. We wrote up the policy & where LLMs fit in authz: bit.ly/4e5mJGS #AuthZEN #AIAgents
5
Cerbos
@cerbosdev
Oct 28
An intern with CRM access won't open HR or finance. An #AI agent with the same access tries everything it can reach @alexolivier explained why on Code Story We wrote up the main ideas, like why agents need a check at every hop: bit.ly/4yQdguG #AIAgents #authorization
Cerbos
@cerbosdev
Oct 27
Many #SupplyChain breaches start with compromised identities, not tampered code. Oct 28 at #ISC2Congress, @alexolivier and @Apple's Vatsal Gupta show how to find identity attack paths in CI/CD and segment NHIs to cut blast radius. …6isc2securitycongress.eventscribe.net/agenda.asp?pfp… #IAM @ISC2
1
Cerbos
@cerbosdev
Oct 23
Cerbos PDP v0.57.0 is out 🚀 Query plans now keep standalone has() checks, so your database applies the same test Cerbos does, and large policy stores keep serving requests during full reloads. Details: bit.ly/4eNdPOm #authorization