Cerbos
cerbos/cerbos
An open-source alternative to Auth0 and Okta.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents. (from the repository)
- Stars
- 4,626
- Licence
- Apache-2.0
- Last push
- 2026-10-16
- Written in
- Go
Is it alive?
Four readings from the repository, each with the rule behind it. No blended score.
Activity
Active
Last push 12 days ago
Active: pushed within 90 days. Slowing: within a year. Quiet: longer.
Releases
Recent
v0.56.0, 28 days ago
Recent: a tagged release within six months. Some projects ship from the main branch and never tag.
Issues
88% closed
52 open · 384 closed
Share of all issues ever filed that are now closed. Under 20 issues is too few to read.
Momentum
+9 in 9 days
4,626 stars
Change in stars across our daily readings, over up to 30 days. Needs a week of readings.
What a business may do with it
PermissiveApache-2.0
Use, change and sell it, including inside a closed product. Keep the copyright notice.
This describes the licence family GitHub identified, not legal advice about this project. The repository’s own LICENSE file is what binds you.
Run it yourself
Cerbos’s README does not show a docker run, docker compose up or helm install in a code block, so this page will not guess one. It may be a desktop app, a library, or documented on its website.
Cerbos against the other open-source options
Every project offered against Auth0 and Okta, most-starred first.
| Project | Stars | Activity | Licence | Self-host | Language |
|---|---|---|---|---|---|
 KeyCloak | 37,427 | Active | Permissive | ○ | Java |
 Authelia | 29,307 | Active | Permissive | ○ | Go |
 Authentik | 26,005 | Active | Not identified | ○ | Python |
 ORY | 17,617 | Slowing | Permissive | ○ | Go |
 Supertokens | 15,349 | Active | Not identified | ○ | Java |
 Zitadel | 15,345 | Active | Network copyleft | ○ | Go |
 Hanko | 9,043 | Active | Not identified | ○ | Go |
 Cerbos (this page) | 4,626 | Active | Permissive | ○ | Go |
Where this page comes from
- Stars, licence, activity, issues, releases and the self-host command are read from the repository. 2026-10-18
- The pairing with Auth0 and Okta and the category come from opensourcealternative.to, a community directory of open-source alternatives. We re-read it weekly.
- Star momentum comes from our own daily readings of the repository. How we collect data