Policy Models

Coding agents can generate OpenAPI specs faster than most governance programs can review them. This article explains how to connect design-time API governance to runtime MCP tool authorization with policy decisions, constrained credentials, and audit receipts.

LLMs can draft authorization policy, but safe policy authoring for AI agents still depends on explicit intent, verifier-guided synthesis, and runtime PDP decisions on real tool calls.

RBAC provides a simple, intuitive authorization solution, while ABAC allows for more fine-grained, dynamic authorization. Learn how to combine the strengths of both

Role-Based Access Control (RBAC) is an authorization model where permissions are managed based on organizational roles. Learn how it works, what it's used for, and how to implement it into your application in this 2024 updated guide

A guide to the most common access control terms. Learn how to integrate MAC and DAC and RBAC, and how the rise of FGA can help your application access control.

Learn how Fine Grained Authorization (FGA) can enhance your application's security and provide precise, dynamic permissions.

Attribute-Based Access Control (ABAC) and Relationship-Based Access Control (ReBAC) - how to make the most suitable choice for your application?

If you've worked on authorization before, you know that sometimes standard policy models just aren't enough. What can we do then? Let's find out -

Explore the process of implementing Role-Based Access Control (RBAC) in applications with policy as code, enhancing security and scalability.

Attribute Based Access Control (ABAC) is an authorization model that grants access based on environmental conditions, as well as user and resource attributes. Learn how ABAC works, its use cases, and how to implement it in your application

Get ready to rumble! Join us on a quest to find the best authorization policy model in an epic battle royale: RBAC vs. ABAC vs. ReBAC

ABAC vs. ReBAC - A comprehensive guide to the pros, cons, use cases, and implementation of these common authorization models

RBAC vs. ReBAC - A comprehensive guide to the pros, cons, use cases, and implementation of these common authorization models

What is Relationship Based Access Control, when should it be used, how can you implement it in your application, and how can you provide a UI for managing it?

Migrating from Role-based access control (RBAC) to Attribute-based access control (ABAC) can prove quite challenging - here's how you can do it painlessly.

Announcing Low-code Attribute Based Access Control (ABAC)