Companies in the category 'Authorization'
These are companies that provide open source tools for managing access control and permissions for resources.
Full-stack authorization as a service
Permit.io is a full-stack authorization-as-a-service platform that enables developers to integrate fine-grained access control into any application without rebuilding permissions infrastructure from scratch. The platform supports RBAC, ABAC, and ReBAC models through a no-code policy editor, and generates policy as code based on OPA's Rego or AWS Cedar. Built on open-source foundations including the OPAL project, Permit.io uses a hybrid model where all authorization decisions are made locally with zero latency, while remaining compliant with HIPAA and SOC2.
Open-source authorization & access control system.
Cerbos offers an open-source authorization layer that simplifies the implementation of complex access control policies in applications. It helps developers manage permissions and roles efficiently.
Full-Stack Toolkit with Authorization on Prisma ORM
ZenStack is a Node.js/TypeScript toolkit that enhances Prisma ORM with a flexible Authorization layer and auto-generated, type-safe APIs/hooks, simplifying full-stack development.
No headlines available
Policy-based access control for software.
Styra enables enterprises to define, enforce and monitor policy across their cloud-native environments. Built on Open Policy Agent, Styra's declarative authorization solution provides security, operations and compliance guardrails to protect applications, as well as the infrastructure they run on.
COSS Weekly Newsletter
Stay up to date with the latest news, funding rounds, and announcements from the COSS universe.
Check out COSS Weekly on the webOso provides authorization as a service.
Oso is a batteries-included authorization framework that helps developers build authorization into their applications. Its core product is built on policy-as-code principles using a declarative policy language called Polar, and it's designed for enterprises to simplify and centralize authorization logic.

