Product Packaging | Feature Gating & Entitlements | Cerbos | Cerbos

🔐 New: A CISO’s benchmark for authorization maturity ➔ Download the ebook

Product packaging

Product packaging and feature gating with policy

Control which features are available to which customers using authorization policy. Trials, tiers, custom bundles, and enterprise contracts, all without hardcoding.

Talk to an engineer

Try playground

Trusted by teams shipping flexible SaaS products

Built for product-led growth

Authorization-driven product packaging

Feature gating without hardcoded flags

Control which features are available to which customers using policy, not feature flags buried in code.

Map product packages to Cerbos roles for clean, declarative entitlements.

Sub-millisecond entitlement checks with no external runtime dependency.

Define complex package hierarchies where premium includes standard includes free.

Support custom contracts and one-off feature bundles for enterprise customers.

Read the docs

Time-limited trials and dynamic upgrades

Offer trial access to premium features with time-based conditions, and upgrade packages instantly via policy changes.

Use time-based conditions in policies to automatically expire trial access.

Upgrade or downgrade customer packages instantly by updating policy, not code.

Build self-service upgrade flows that trigger policy changes via the Cerbos API.

Test package configurations in the Cerbos Playground before deploying to production.

Try the playground

Full visibility into entitlement decisions

Understand exactly which features are accessible to which customers, and prove it for billing, compliance, and support.

Log every entitlement check with package, feature, and decision result.

Trace feature access back to the exact policy version for billing accuracy.

Support customer success teams with clear visibility into what each customer can access.

Learn about audit logs

Simple integration

Implement product packaging in four steps

Get started

Define your packages as policies

Map product tiers (free, standard, premium) to authorization policies that control which features each package can access.

Gate features with a single API call

Check entitlements at runtime by calling Cerbos. Get an instant allow/deny decision based on the user's package.

Update packages without code deploys

Add features to a tier or create a new package by updating policy files. No application redeployment needed.

Audit every entitlement decision

Track which features were accessed, by whom, under which package, with full decision-level evidence.

Seamless integration

Works with your existing tools, workflows, and infrastructure

All supported integrations

Flexible policy sources

Manage packaging policies from any Git provider, CI/CD tool, Cerbos Hub API, CLI, or direct UI upload.

SDKs for every stack

First-class SDKs for JS, Go, Python, Java, .NET, Rust, PHP, and Ruby.

Deployment targets

Deploy Cerbos PDPs in containers, serverless, edge, or multi-region clusters.

Compliance ready audit logs

Ensure audit readiness for SOC 2, HIPAA, ISO 27001, PCI DSS, and GDPR.

How teams use Cerbos for product packaging

Talk to an engineer

“We can make unlimited conditions, attributes, parameters to any granularity level without writing any code. It allows us to deliver truly personalized services quickly, securely & at scale.”

Karen Kim

CEO @Human Managed

Days-long coding task reduced to 5 minutes.

Dependencies and middleware replaced with a single binary.

Why teams choose Cerbos for product packaging

Flexible packaging

Define unlimited package tiers, custom bundles, and trial configurations with policy.

Instant updates

Change what features are in a package without code changes or redeployments.

Billing accuracy

See how Cerbos helps product teams implement flexible packaging, trials, and entitlements without engineering bottlenecks.

Talk to an engineer