policy-engine

Permify

PermifyOpen

Open-source authorization service for fine-grained RBAC, ABAC, and ReBAC

Permify is an open-source authorization service for fine-grained access control. Teams model RBAC, ABAC, and ReBAC policies centrally and enforce them through a Zanzibar-inspired decision service.

Cerbos

CerbosOpen

Self-hosted authorization layer with versioned YAML policies and audit logs

Cerbos is a self-hosted authorization layer that answers allow-or-deny checks from a central policy decision point for apps and services.