Hello and Happy New Year from Cerbos!

Our January newsletter includes :

• Updates to Cerbos
  • v0.24 of Cerbos
• Help design the future of Cerbos to enable Product and Security teams to manage policy - book a workshop
• Cerbos events:
  • Codementor online talk
  • CloudNativeSecurityCon NA: Feb 1-2
  • Civo Navigate: Feb 7-8
• New blog posts on Cerbos.dev:
  • Authorization in your SvelteKit app
  • How Debite built scalable and reliable access controls with Cerbos
  • How to add global authorization for Python microservices
• Industry news:
  • Top four cybersecurity trends for 2023
• and a chance to win a t-shirt
  You are receiving this email because either we have met, chatted, or you’ve visited our website cerbos.dev and asked us to keep you up-to-date. If you have been forwarded this email, you can subscribe and receive future updates directly from us. If you prefer not to receive these updates, you can unsubscribe below, but we hope you stay!

Updates to Cerbos

Cerbos v0.24

The latest release of Cerbos, v0.24, includes updates to audit logging filters, database connection improvements and more options when deploying via Helm.

• The Cerbos CLI (cerbosctl) now supports using zip files for loading policies and schemas through the Admin API.
• It is now possible to set scopes for PlanResources requests made through the Go SDK.
• The generated query plan for certain indexing expressions is now much simpler.
• The error message produced when users try to use the audit log while it’s not enabled is now more informative.
  You can find the full release notes here .

Cerbos events

For those of you who attended the live talk, Alex Olivier, Product Lead at Cerbos, hosted on Codementor at the end of 2022 - it was amazing to see and interact with you and help answer your questions. Thank you for joining us! If you are thinking about designing a scalable authorization process for your product and were not able to join the live event, check out the recording of the talk below!
Watch the recording of the talk here.
Over the next several weeks, we will be attending the following two conferences. If you are around, please stop by and say hello. We are also providing a discount for tickets to Civo Navigate. You can claim your discount by sending us an email.

• CloudNativeSecurityCon NA: Feb 1-2
  Cerbos will be at CNSC in Seattle, please stop by our booth and say hello!
• Civo Navigate: Feb 7-8
  Cerbos will be giving a talk on the topic of “Solving the never ending requirements of authorization” on February 8th. Check out the full list of speakers and schedule here.

Blog highlights

Authorization in your SvelteKit app

Expanding on the ecosystem of integrations, we have now added SvelteKit to go alongside Next, Nest and other popular JS frameworks. Consisting of both an example project repo as well as a guide from our guest author Simone, discover how easy it is to connect Cerbos to your project and enable fine-grained authorization for your users.

How Debite built scalable and reliable access controls with Cerbos

Debite is a dynamic financing and payments platform tailored to early-stage startups and high-growth companies in the UK. As a financial technology company, Debite wanted to build a scalable and reliable solution for access controls, both in their internal dashboard and in the customer platform.
We spoke to Engin Attar, the Head of Product and Growth, and Co-Founder of Debite, to understand why Debite implemented Cerbos — and the exceptional results that came from the partnership.

How to add global authorization for Python microservices

Microservices offer a lot of advantages, including flexible language selection, functionality-based scalability, independent deployment, and independent product development teams. They can, however, bring challenges as well. One of those challenges is authentication and authorization of resources.
If an authorization mechanism is implemented as a global shared provider, it will help remove duplication, freeing the development team to focus on the business logic. Read the full article to discover how to build REST API endpoints in Python and add resource access permissions to these endpoints using Cerbos.

Industry news

Top four cybersecurity trends for 2023

Forbes will be closely looking into several developments this year, including adapting infrastructures to enable a hybrid workforce, increasing support of hybrid cloud environments, and others. Read the full article to discover why organizations will increasingly see the value in building a response plan for various types of security incidents, and maintaining a safer cybersecurity environment.

Do you want a Cerbos t-shirt?

We want to give you a t-shirt! We also want to talk to you about Cerbos and get your feedback, both what you like and dislike, what are your primary use cases, if you are missing any particular functionality or have suggestions on how you would like us to improve the product.
Please, contact us via our feedback page and we will reach out to you to book a session.