&color=rgb(100%2C100%2C100)&link=https%3A%2F%2Fgithub.com%2Faserto-dev%2Ftopaz)
Centrally manage access to custom homegrown apps
Manage all of your policies in one place and model your organization structure in minutes.
Centralized authorization system
Manage authorization for multiple applications with ease. View all of your policies, authorizers, users, and authorization data in one place. Control access to your internal applications and reuse policies across apps and services.
Organizational-aware access controls
Aserto natively supports management hierarchies and permission inheritance. Easily add the ability for managers to access data that is owned by people in their organization.
Support employees and partners
The right access for employees, partners, and other stakeholders. Provide different user types with different access, and easily limit it further based on any criteria, including department, project, geo, seniority, function, and more.
Works with your environment
Add access controls to apps built on any stack. A complete set of SDKs and quickstarts make it easy. Local authorizers and a control plane that can be deployed to any cloud, or on-prem, ensure Aserto integrates with what you have.
const { jwtAuthz } = require("@aserto/aserto-node")
const checkAuthz = jwtAuthz({ ... })
// ...
app.get("/protectPath/:param", checkJwt, checkAuthz,
async (req, res) => { ... }
)
Node
Go
Python
Java
.NET
Ruby
Automated audit trails
Compliance and audits without the headache. Automatically capture detailed decision logs for every authorization decision made, including the inputs provided to the authorizer, and the reasoning for the decision. Easily support audits or prove compliance with these logs.
Add powerful capabilities to your apps
Just-in-time Authorization
Support internal teams and partners with access to what they need, when they need it. Provide CSMs with access to the records of customers they are assigned to, or let partners view the deals they have generated. And easily revoke access once circumstances change.
Externalized authorization service
Externalize authorization logic from code and manage all your policies from a central location. The Aserto control plane gives you a bird's-eye view of your authorization system, boosting your security posture while significantly limiting admin work.
Built on an open foundation
Aserto is built on a cloud-native, open-source foundation. It uses best in class open-source projects, including Topaz local authorizers, Open Policy Agent decision engines, and a Google Zanzibar-inspired directory.
Trying to decide whether to build or buy?
Authorization is deceptively hard. Open Source projects like Topaz can help. And Aserto can help you scale and support a Topaz-based "authorization control plane" for all of your internal and external applications. Get the whitepaper to learn more!
Get the whitepaper!
