WebAssembly (WASM) Embedded Policy Decision Points | Cerbos
🔐 New: A CISO’s benchmark for authorization maturity ➔ Download the ebook
WebAssembly (WASM) embedded Policy Decision Points
Cerbos Hub introduces a unique, flexible approach to authorization by leveraging WebAssembly (WASM) for embedded Policy Decision Points (PDPs).
Lightweight and compatible
Take advantage of a stateless and scalable authorization system that seamlessly integrates into your environment. Unlike the standard open source PDP, an embedded PDP can be deployed as a library instead of a service at edge, on client devices and in serverless environments. Cerbos Hub delivers this feature by creating a policy file on CDN, pre-compiled and ready to be loaded into your application, all whilst maintaining the same API as the PDP service.
Since launching embedded PDPs, we have heard consistent feedback from teams using client-side authorization at scale: more control over bundle contents, tenant isolation in multi-tenant applications, security controls for sensitive authorization logic. We have delivered on that feedback with ePDP Rules - a new way to configure exactly what policies are served to which clients, with enterprise-grade security built in.
Advantages of an embedded PDP
- Easier front-end policy checks: The lightweight design lets your application make decisions on UI rendering faster, and without making a call to the backend
- Portability: Usable in serverless environments like Vercel and Netlify.
- Reduce latency: Process authorization decisions directly on the user's device. Or distribute your authorization logic closer to the user by embedding it at the edge, ensuring rapid response times and reduced central server loads.
- Security and consistency: As Cerbos Hub distributes policies for both the Policy Decision Points (PDPs) and the WebAssembly modules - any changes to policy are reflected everywhere with no extra work. Ensure a consistent and unified approach to policy enforcement.
Find out more
Features, benefits & use cases
Fit Cerbos seamlessly into your tech stack
Playground
Prototype policies in your browser right now
Cerbos Hub
Implement roles & permissions in your app
Speak to an engineer
Book an intro call and learn more