Aserto

A fine-grained authorization service for applications and APIs that provides resource-level access controls, policy modeling, and real-time enforcement to replace custom-built permissions and standing access. It sells to developers, IT teams, and B2B software companies building multi-tenant SaaS, internal applications, and APIs. It is delivered as a SaaS control plane with edge-deployed Topaz authorizers, SDKs and gRPC/REST APIs, and integrations for identity providers and directories, with centralized management and real-time data sync.

Key features

• Resource-level access controls
• Graph directory for identities and resources
• Custom roles and inherited permissions
• RBAC, ABAC and ReBAC support
• Rego policy-as-code workflow
• Local Topaz authorizers (~1ms decisions)
• Real-time policy and data sync
• Central control plane management
• Automated decision logs and audit trails
• SIEM and logging integrations
• SDKs and gRPC/REST APIs
• Identity provider integrations