Aserto is an application authorization platform that provides fine-grained access control for applications and APIs. It offers real-time authorization with millisecond latency, supporting role-based access control (RBAC), attribute-based access control (ABAC), and relationship-based access control (ReBAC). Aserto separates authorization logic from application code, allowing policies to be managed independently. It uses a graph-based directory to model users, groups, identities, attributes, and resources, enabling flexible and scalable access decisions. Built on open-source projects like Open Policy Agent (OPA) and OCI, Aserto provides a set of tools and services for defining, evolving, and enforcing user permissions in applications.
