Aserto lets you add powerful authorization capabilities that scale up with your application in a fraction of the time it would take to build it by hand.
At Metrikus we've had a great experience using Aserto during the closed beta phase, with excellent support along the way to help us achieve our fairly complex Authorization goals. Looking forward to seeing what new features emerge as the product matures!
Hello, Iโm Omri! Iโm the co-founder of Aserto, and Iโm excited to announce that Aserto is now open to all!
Why did we build this?
Every SaaS app needs permissions and RBAC, so itโs hard to believe that in 2022, thereโs no standard developer API for authorization.
Authorization feels deceptively easy at first, but as your product moves upmarket, the requirements keep piling up: finer-grained permissions, custom roles, identity provider integrations, audit trailsโฆ all essential for crossing the chasm and becoming a great enterprise application. But it takes significant engineering time, carries a large opportunity cost, and is tricky to do in a secure and performant way.
Why is authorization so hard? Since itโs on the critical path of every application request, it has to be as lightweight as a library, returning results in milliseconds. But it also needs to provide the control-plane benefits of cloud-based developer APIs. Itโs an architectural challenge that my co-founder @gertd and I solved when we worked on Azure Active Directory.
We founded Aserto to fill this void and offer the definitive developer API for authorization.
What does Aserto do?Aserto brings the best of a library and service: it runs close to your application, or as we call it, โat the edgeโ - so authorization calls are local and blazing fast. At the same time, it allows you to centrally manage all the artifacts needed for authorization decisions.
Aserto picks up where your Identity Provider leaves off: you can connect and sync your IDP(s) to Asertoโs directory, and the control plane automatically delivers any attribute changes from the directory to the edge.
Aserto eliminates the spaghetti code thatโs so commonly associated with authorization by lifting policy logic out of your code and into a separate repository. A GitOps workflow lets you manage your policy as code, and evolve it without redeploying your application.
Aserto provides full audit trails for every authorization decision. In enterprise-grade authorization systems, every decision needs to be explainable. Decision logs must include the policy, user attributes, and resource data behind every decision. Aserto centralizes decision logs and makes it easy to ingest them into log analytics systems like ELK or Splunk.
Aserto is easy to integrate: Aserto is contract-first, providing REST and gRPC APIs for down-to-the-metal developers. We also provide idiomatic SDKs for various languages and frameworks, including Express.js, React, Go, Python, Flask, and .NET.
Create your free account today! And feel free to ask any questions!
Report
@gertd@omri_gazitt Yes, I heard about this when I discussed application modernization at my company with the programmers I hired. By the way, I had to look for these specialists for a long time because so many businesses are now moving to the cloud. After all, the cloud is much more convenient, fast, and functional. Of course, when you upgrade your technologies at a company, you have to hire specialists and pay them, but it seems that it's worth it.
Hey everyone,
Disclaimer: founder of Permify, low-code access control and role management.
Omri has defined the problem well. Authorizations is something hard especially when you get pass to the certain point.
Or you donโt have time/skills to build an future-proof system.
Although weโre in the same space, weโre taking different approaches and to be honest Iโm fan of their product as well.
Best of luck!
Aserto