Aserto

Aserto offers a robust authorization solution designed to manage and enforce access controls at the resource level for various applications. The service includes a range of features such as roles, hierarchies, subscriptions, sharing, and collaboration tools. It supports real-time authorization, which helps in eliminating standing permissions and ensures that access rights are granted based on the latest data. Aserto utilizes a centralized control plane for efficient management of users, policies, authorizers, and authorization data. The platform is compatible with any model and can be integrated into existing systems using SDKs, middleware, or gRPC / REST APIs. It emphasizes security principles like zero trust and least privilege in its authorization policies. Additionally, Aserto automatically collects and aggregates authorization decisions to provide comprehensive audit trails. The foundation of Aserto is modern, cloud-native, and open-source, incorporating elements such as the Topaz open-source authorizer and the Open Policy Agent decision engine.