Fine-grained access control
Easily add flexible, policy-based, real-time access control to your applications
Model, manage, enforce
Model: The Aserto Directory models your identities, attributes, and resources as a graph of objects and relationships. Mapping relationships between your organization's objects to policies enables flexible, real-time enforcement across your application. The Aserto Directory is cached at the edge inside each Edge Authorizer to deliver the data driving authorization decisions exactly where it’s needed.
Import your users, and manage their relationships to resources and groups
Connect your IDP as a source of truth for users, roles, and attributes.
Manage your policy as code, and built it into immutable images
Use a docker-inspired, policy-as-code workflow to build, tag, sign, and deploy your policy images just like container images.
Enforce in real-time
Deploy Aserto Edge Authorizer(s) close to your application as microservices or sidecars to make access control decisions against real-time data in milliseconds.
Control centrally
The Aserto Control Plane is your central management hub for users and policies and pushes the latest data to the application edge.
Policies: View and manage access control policies sourced from your container registry in your central management plane. Easily test policies against users in your Aserto Directory. Turnkey decision logs for each policy instance across authorizers provide enhanced compliance and monitoring.
Go live quickly
APIs, SDKs, and quickstarts for most popular languages and frameworks make it easy to integrate Aserto into your tech stack.
End-to-end authorization solution
Edge Authorizers
A simple hosted authorizer for dev/test, and a lightweight edge authorizer for production workloads
Aserto GraphQL Directory
Powerful GraphQL directory for modeling relationships between your users, resources, and attributes.
A central control plane for managing access control policies for all your apps and services
An automated GitOps workflow for building, testing, and deploying policy changes
APIs, SDKs, and quickstarts for popular languages and frameworks
Edge Authorizers based on OPA
Open source authorizer built on top of Topaz and Open Policy Agent
IDP integrations
Native integrations with leading IDPs
