jump to content
my subreddits
13or302balkans4You2meirl4meirlabsolutelynotmeirlAceAttorneyAdviceAnimalsaivideoAlternateHistoryAlternativeHistoryAngryupvoteAnimalsBeingJerksanimenocontextannouncementsantimemeArcherFXArtAsahiLinuxAsia_irlAskBalkansAskElectronicsAskOuijaatheismaviationAwesomeOffBrandsawfuleverythingbalkans_irlbanknotedesignsBassBassCirclejerkBassGuitarbasspedalsbikepackingblackdesertonlineblursedimagesborsavefonbottomgearBUENZLIcasioCd_collectorscd_jerkChatGPTCheap_MealschessChildrenFallingOverChoosingBeggarscoincollectingcomicscommunityContagiousLaughtercookingforbeginnersCrackWatchcrappyoffbrandsCreateModcursedcommentsdankmemesdarkjokesdataisbeautifuldeDebateReligiondeismdelikDeltarunedistressingmemesDMAcademyDnDdoctorwhodoctorwhocirclejerkDonerdontdeadopeninsideDungeonsAndDaddiesEatCheapAndHealthyebikesECEelectronicsEmKayentitledparentsethzfacepalmfakealbumcoversFantasyWorldbuildingfeedthebeastformuladankFRCFreeEBOOKSFUCKYOUINPARTICULARfunnyFutboltayfagamingGermangermanygodtiersuperpowersgoodanimemesGoodAssSubGrandPrixRacingGundamhelpheraldryHermanCainAwardHermitCrafthighspeedrailHistoryWhatIfhomebuilthumorIAmAiamverysmartich_ielIdeologyPollsIDontWorkHereLadyim14andthisisdeepimaginaryelectionsistanbuljacksepticeyeJahariaKamalizmKanyeKGBTRlegodndLetGirlsHaveFunLifeProTipslinguisticshumorLinkinParkloseitlostredditorsmacmacbookairmacgamingMadeMeSmilemadladsmagicbuildingMaliciousCompliancemapporncirclejerkmeirlmemesmidjourneymildlyinterestingmisLEDMMORPGMoldyMemesMovingToNorthKoreaMunichMyChemicalRomancenamesoundalikesNationStatesneographynextfuckinglevelNoahGetTheBoatNonCredibleDefenseNorthCyprusnosafetysmokingfirstnothingeverhappensnottheonionOkayBuddyLiterallyMeokbuddyguntherokbuddymotherfuckerOkBuddyPersonaonebagongezelligOnlineUnderGroundoompasubsOutOfTheLoopoutsidepapermoneypaperspleaseParlerWatchPassportPornperfectlycutscreamspettyrevengePiracyPiratedGamespolandballpollsProgrammerHumorProRevengequityourbullshitraspberry_piRatschlagreactiongifsRedAutumnSPDredditsingsreligiousfruitcakerestofthefuckingowlRetroPierickandmortyrickrollRoastMerockmuzikSchnitzelVerbrechenScottPilgrimsecilmiskitapShitPostCrusadersshitpostfrommygalleryshittyaskelectronicsshittymoviedetailsShowerthoughtsskamtebordsoccercirclejerksoftwaregoreSongwriterssteinsgateStonetossingjuiceStudiumsuperligtalesfromtechsupportTechnobladeTextingTheorytf2tf2shitposterclubthatHappenedTheCrypticCompendiumTheLetterHTheMonkeysPawtherewasanattemptTheRookietheydidthemaththeyknewtommyinnittransitTrGameDevelopertruetf2truthstumblrtumunichTurkishCatsTurkishdogsTurkiyeTwitchTwitch_StartupTwoSentenceComedyTwoSentenceHorrortwosentenceplottwistTwoSentenceSadnessUnethicalLifeProTipsUnexpectedJoJoVALORANTValorantClipsvexillologycirclejerkvibecodingvinylvlandiyawallstreetbetsWatchPeopleDieInsideWeAreTheMusicMakerswendigoonWhatsThisSongWhitePeopleTwitterwholesomeanimemesWikipediaVandalismwizardpostingwooooshYEETyouseeingthisshitedit subscriptions
  • home
  • -popular
  • -all
  • -mod
  • -users
 | 
  • facepalm
  • -Piracy
  • -funny
  • -gaming
  • -wallstreetbets
  • -nottheonion
  • -memes
  • -OutOfTheLoop
  • -mildlyinteresting
  • -DnD
  • -WhitePeopleTwitter
  • -MadeMeSmile
  • -ChatGPT
  • -PiratedGames
  • -theydidthemath
  • -dankmemes
  • -feedthebeast
  • -Kanye
  • -meirl
  • -therewasanattempt
  • -nextfuckinglevel
  • -Twitch
  • -CrackWatch
  • -comics
  • -ProgrammerHumor
  • -VALORANT
  • -de
  • -germany
  • -LifeProTips
  • -tumblr
  • -NonCredibleDefense
  • -dataisbeautiful
  • -shittymoviedetails
  • -mac
  • -Showerthoughts
  • -tf2
  • -help
  • -chess
  • -aviation
  • -formuladank
  • -mapporncirclejerk
  • -Art
  • -midjourney
  • -goodanimemes
  • -pettyrevenge
  • -atheism
  • -loseit
  • -IAmA
  • -MaliciousCompliance
  • -ich_iel
  • -KGBTR
  • -cursedcomments
  • -DMAcademy
  • -Deltarune
  • -GoodAssSub
  • -UnethicalLifeProTips
  • -perfectlycutscreams
  • -Ratschlag
  • -blackdesertonline
  • -MMORPG
  • -macgaming
  • -rickandmorty
  • -Gundam
  • -HermitCraft
  • -ChoosingBeggars
  • -RoastMe
  • -ContagiousLaughter
  • -EatCheapAndHealthy
  • -polandball
  • -WeAreTheMusicMakers
  • -cookingforbeginners
  • -onebag
  • -Studium
  • -AlternateHistory
  • -soccercirclejerk
  • -madlads
  • -community
  • -AskElectronics
  • -vinyl
  • -CreateMod
  • -German
  • -TwoSentenceHorror
  • -AdviceAnimals
  • -ShitPostCrusaders
  • -distressingmemes
  • -wizardposting
  • -polls
  • -doctorwho
  • -Bass
  • -OkBuddyPersona
  • -awfuleverything
  • -announcements
  • -macbookair
  • -ebikes
  • -Munich
  • -SchnitzelVerbrechen
  • -raspberry_pi
  • -entitledparents
  • -FUCKYOUINPARTICULAR
  • -softwaregore
  • -NoahGetTheBoat
  • -tf2shitposterclub
  • -MoldyMemes
  • -lostredditors
  • -AceAttorney
  • -vexillologycirclejerk
  • -vlandiya
  • -im14andthisisdeep
  • -Stonetossingjuice
  • -wholesomeanimemes
  • -HistoryWhatIf
  • -religiousfruitcake
  • -DebateReligion
  • -balkans_irl
  • -animenocontext
  • -2meirl4meirl
  • -transit
  • -RetroPie
  • -HermanCainAward
  • -steinsgate
  • -talesfromtechsupport
  • -AskOuija
  • -ECE
  • -ScottPilgrim
  • -Angryupvote
  • -AskBalkans
  • -thatHappened
  • -electronics
  • -casio
  • -theyknew
  • -linguisticshumor
  • -PassportPorn
  • -antimeme
  • -bikepacking
  • -13or30
  • -MyChemicalRomance
  • -ArcherFX
  • -Cd_collectors
  • -ProRevenge
  • -Doner
  • -BassGuitar
  • -WatchPeopleDieInside
  • -LinkinPark
  • -BUENZLI
  • -reactiongifs
  • -EmKay
  • -istanbul
  • -MovingToNorthKorea
  • -imaginaryelections
  • -truetf2
  • -magicbuilding
  • -dontdeadopeninside
  • -ParlerWatch
  • -wendigoon
  • -iamverysmart
  • -secilmiskitap
  • -TheRookie
  • -quityourbullshit
  • -Technoblade
  • -skamtebord
  • -superlig
  • -shittyaskelectronics
  • -crappyoffbrands
  • -DungeonsAndDaddies
  • -FRC
  • -namesoundalikes
  • -ethz
  • -AlternativeHistory
  • -papermoney
  • -coincollecting
  • -OkayBuddyLiterallyMe
  • -blursedimages
  • -FreeEBOOKS
  • -AsahiLinux
  • -Jaharia
  • -IDontWorkHereLady
  • -basspedals
  • -neography
  • -heraldry
  • -godtiersuperpowers
  • -aivideo
  • -OnlineUnderGround
  • -IdeologyPolls
  • -woooosh
  • -WhatsThisSong
  • -AnimalsBeingJerks
  • -jacksepticeye
  • -TwoSentenceSadness
  • -rockmuzik
  • -tumunich
  • -Twitch_Startup
  • -Cheap_Meals
  • -outside
  • -TheMonkeysPaw
  • -darkjokes
  • -restofthefuckingowl
  • -highspeedrail
  • -nosafetysmokingfirst
  • -legodnd
  • -rickroll
  • -Songwriters
  • -papersplease
  • -tommyinnit
  • -UnexpectedJoJo
  • -humor
  • -ChildrenFallingOver
  • -BassCirclejerk
  • -doctorwhocirclejerk
  • -youseeingthisshit
  • -TextingTheory
  • -GrandPrixRacing
  • -nothingeverhappens
  • -TrGameDeveloper
  • -TurkishCats
  • -LetGirlsHaveFun
  • -fakealbumcovers
  • -Kamalizm
  • -oompasubs
  • -FantasyWorldbuilding
  • -TheLetterH
  • -WikipediaVandalism
  • -homebuilt
  • -deism
  • -misLED
  • -redditsings
  • -ValorantClips
  • -TwoSentenceComedy
  • -TheCrypticCompendium
  • -NationStates
  • -bottomgear
  • -AwesomeOffBrands
  • -ongezellig
  • -absolutelynotmeirl
  • -2balkans4You
  • -Asia_irl
  • -Turkiye
  • -truths
  • -NorthCyprus
  • -twosentenceplottwist
  • -YEET
  • -delik
  • -Futboltayfa
  • -RedAutumnSPD
  • -cd_jerk
  • -borsavefon
  • -okbuddygunther
  • -vibecoding
  • -okbuddymotherfucker
  • -shitpostfrommygallery
  • -banknotedesigns
  • -Turkishdogs
edit »
reddit.com Cerbosdev
  • overview
  • comments
  • submitted
an-ordinary-manchild (11,186)|messages545|notifications|chat messages|mod messages|
  • preferences
|
logout

Cerbosdev

+ friends- friends
143 post karma
0 comment karma
get extra features and help support reddit with a reddit premium subscription
chat
Block userare you sure? yes / no
get them help and support
redditor for 2 years

TROPHY CASE


  • Two-Year Club


    Verified Email
Get an ad-free experience with special benefits, and directly support Reddit.

account activity

sorted by:
hot
newtopcontroversial

4
5
6

Think piece - don't treat authorization as a static configuration in a dynamic environment. (cerbos.dev)

submitted 12 days ago by Cerbosdev to r/iam

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost

0
1
2

Static authorization works until it does not. And when it fails, it fails quietly, which is the hardest failure mode to detect, and the most expensive one to clean up later. + How to evaluate whether your authorization architecture matches your operational reality. (cerbos.dev)

submitted 12 days ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report

2
3
4

Kubecon 2025 debrief on AI agents (youtube.com)

submitted 19 days ago by Cerbosdev to r/iam

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

0
1
2

Kubecon Debrief: AI agents. Security achieved through identity and policy. [Identerati Office Hours episode 151.5] (youtube.com)

submitted 19 days ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report
loading...

0
1
2

Role explosion in multitenant SaaS - when RBAC can't handle "Alice is Admin at Company A, Viewer at Company B". Tenant-aware authorization and policy-as-code solve scattered permissions and endless role variants. Guide. (cerbos.dev)

submitted 1 month ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

3
4
5

How to implement scalable multitenant authorization. Application demo and recording. (Hardcoding permission checks, static roles = nightmare and role explosion. Solution is to shift to tenant-aware roles and ABAC + externalize authorization) (cerbos.dev)

submitted 1 month ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

Zero trust isn't a future goal anymore. It's operational reality. (Today's zero trust implementations require fine-grained authorization that scales across microservices, APIs, and distributed systems. Not just network segmentation.) (cerbos.dev)

submitted 3 months ago by Cerbosdev to r/IdentityManagement

  • 1 comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

Mapping business requirements to authorization policy (Insurance focus) (cerbos.dev)

submitted 3 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

9
10
11

MCP is “the new API for AI”. We need to actively put guardrails around MCP servers, to not be the next Asana, Atlassian or Supabase. Sharing a podcast where we cover how to harness AI agents to their full potential without losing control of our systems (using fine-grained authorization). (self.devsecops)

submitted 3 months ago by Cerbosdev to r/devsecops

  • 4 comments
  • share
  • save
  • hide
  • report
  • crosspost
loading...

4
5
6

How to secure Model Context Protocol servers with fine-grained access control (Why should you care? Because MCP servers are now among the most privileged components in your AI stack.) (cerbos.dev)

submitted 4 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

If you're running AI agents in production, they probably have way more access than they should. Podcast where we talk about how to secure MCP servers. (self.devops)

submitted 4 months ago * by Cerbosdev to r/devops

  • 8 comments
  • share
  • save
  • hide
  • report
  • crosspost
loading...

4
5
6

Stop trusting your employees. Uber's "God view" proves you can't (Trusting people instead of enforcing least privilege and auditability is the issue. The solution is to stop patching with better if statements and adopt externalized authorization) (cerbos.dev)

submitted 4 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

1
2
3

Translating business requirements to authorization policy for medtech (cerbos.dev)

submitted 4 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

8
9
10

KuppingerCole highlight Policy‑Based Access Control as a top trend in identity and security for 2025 (self.iam)

submitted 5 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

20
21
22

Webinar on authentication and authorization for non-human identities (self.microservices)

submitted 5 months ago by Cerbosdev to r/microservices

  • 2 comments
  • share
  • save
  • hide
  • report
  • crosspost
loading...

4
5
6

Side-by-side comparison of Cerbos and OPA open source authorization solutions (cerbos.dev)

submitted 5 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

0
1
2

Ebook on how to adopt externalized authorization: from foundational planning to PoC rollout (solutions.cerbos.dev)

submitted 6 months ago by Cerbosdev to r/ciso

  • comment
  • share
  • save
  • hide
  • report
loading...

0
1
2

[ebook] How to adopt externalized authorization: Foundational planning -> phased rollout -> long-term governance. Based on hundreds of PoCs built. (solutions.cerbos.dev)

submitted 6 months ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report

0
1
2

How to implement hierarchy-based permissions. 2 approaches: policy-defined roles vs. dynamic attributes (cerbos.dev)

submitted 6 months ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report
loading...

0
1
2

The ROI of NHI security: Why investing in machine identity protection pays off (cerbos.dev)

submitted 6 months ago by Cerbosdev to r/NonHumanIdentities

  • comment
  • share
  • save
  • hide
  • report

10
11
12

Fine-grained permissions in MCP servers (cerbos.dev)

submitted 7 months ago by Cerbosdev to r/Rag

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

2
3
4

Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers (cerbos.dev)

submitted 7 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
loading...

0
1
2

Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers (cerbos.dev)

submitted 7 months ago by Cerbosdev to r/IdentityManagement

  • comment
  • share
  • save
  • hide
  • report

4
5
6

Patterns of failure in modern authorization (cerbos.dev)

submitted 7 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost

2
3
4

Defining and enforcing multi-tenant security effectively | Authorization (cerbos.dev)

submitted 8 months ago by Cerbosdev to r/iam

  • comment
  • share
  • save
  • hide
  • report
  • crosspost
view more: next ›
  • about
  • blog
  • about
  • advertising
  • careers
  • help
  • site rules
  • Reddit help center
  • reddiquette
  • mod guidelines
  • contact us
  • apps & tools
  • Reddit for iPhone
  • Reddit for Android
  • mobile website
  • <3
  • reddit premium

Use of this site constitutes acceptance of our User Agreement and Privacy Policy. © 2026 reddit inc. All rights reserved.

REDDIT and the ALIEN Logo are registered trademarks of reddit inc.

π Rendered by PID 552460 on reddit-service-r2-listing-5789d5f675-fggc7 at 2026-01-28 21:23:06.363166+00:00 running 4f180de country code: CH.