Cerbos · The runtime permission layer for AI agents — the company answering "what is this agent actually allowed to do", which is the control almost every agent stack is currently missing.

An authorization service. Your app asks Cerbos "may this user — or this AI agent — do this thing to this record, right now?" and Cerbos answers from policies written once in YAML and held in one place, instead of permission if-statements scattered through your code. Three parts: Cerbos PDP (the open-source Apache-2.0 decision engine you run yourself), Cerbos Hub (the hosted control plane that authors, tests, versions and distributes the policies, and keeps the audit log), and Cerbos Synapse (fetches user/resource data from other systems so a decision can use facts the request did not carry).

Sector

Connectors & auth

Stage

Seed

On the roster since

15 Sept 2026