Cerbos
Cerbos PDP
Documentation Code Issue Tracker Discussion Forum
Cerbos Hub
Sign up Documentation
Support
Community Slack Discussion Forum Email (help@cerbos.dev)
Cerbos website

Cerbos

  • Getting started
    • What is Cerbos?
    • Quickstart
    • Tutorial
      • Intro
      • Running locally
      • Resource Definition
      • Calling Cerbos
      • Testing Policies
      • Adding Conditions
      • Derived Roles
      • Principal Policies
      • Attribute Schema
      • Integrating Cerbos
    • Installation
      • Binaries
      • Container
      • Helm chart
  • Cerbos API
    • Using the API
    • Admin API
  • Policies
    • Policy Authoring
    • Derived Roles
    • Resource Policies
    • Principal Policies
    • Scoped Policies
    • Conditions
    • Variables
    • Outputs
    • Schemas
    • Validating and testing
    • Best practices
  • Configuration
    • Audit
    • AuxData
    • Engine
    • Observability (metrics and traces)
    • Schema
    • Server
    • Storage
    • Telemetry
    • Tracing (deprecated)
  • Deployment patterns
    • Kubernetes Service
    • Kubernetes Sidecar
    • Systemd Service
    • Serverless/FaaS environments
  • CLI
    • cerbos
    • cerbosctl
  • Recipes
    • Example Apps
      • Photo-share application
      • Demo of securing a REST API with Cerbos
      • Modelling a multi-tenant SaaS with Cerbos
      • Admin API demo with Go and React
    • Authentication Integration
      • Auth0
      • FusionAuth
      • JWT
      • Magic
      • Okta
      • AWS Cognito
    • ORM Integration
      • Prisma
      • SQLAlchemy
  • Release Notes
    • v0.32.0
    • v0.31.0
    • v0.30.0
    • Archives
      • v0.29.0
      • v0.28.0
      • v0.27.0
      • v0.26.0
      • v0.25.0
      • v0.24.0
      • v0.23.1
      • v0.23.0
      • v0.22.0
      • v0.21.0
      • v0.20.0
      • v0.19.1
      • v0.19.0
      • v0.18.0
      • v0.17.0
      • v0.16.0
      • v0.15.1
      • v0.15.0
      • v0.14.0
      • v0.13.0
      • v0.12.0
      • v0.11.0
      • v0.10.0
      • v0.9.1
      • v0.9.0
      • v0.8.0
      • v0.7.0
      • v0.6.0
      • v0.5.0
  • Glossary
    • Glossary of Cerbos terms
  • Engineering
    • Why Cerbos runs as a separate process
Cerbos 0.32.0
  • Cerbos
    • 0.44.0-prerelease
    • 0.43.0
    • 0.42.0
    • 0.41.0
    • 0.40.0
    • 0.39.0
    • 0.38.1
    • 0.37.0
    • 0.36.0
    • 0.35.1
    • 0.34.0
    • 0.33.0
    • 0.32.0
  • Cerbos Hub
  • Cerbos
  • Engineering
0.44.0-prerelease 0.43.0 0.42.0 0.41.0 0.40.0 0.39.0 0.38.1 0.37.0 0.36.0 0.35.1 0.34.0 0.33.0 0.32.0
Edit this Page

Why we built Cerbos this way

This documentation is for a previous version of Cerbos. Choose 0.43.0 from the version picker at the top right or navigate to https://docs.cerbos.dev for the latest version.

Welcome! The purpose of this section is to give some insight into how decisions were made when designing and building Cerbos, for the more curious of our users.

  • Why Cerbos runs as a separate process

Glossary Why Cerbos runs as a separate process
Cerbos   Copyright (C) 2020-2025 Zenauth Ltd.