compare
Cerbos vs Open Policy Agent
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Cerbos | Open Policy Agent |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 4.6k | 12k |
| Latest | v0.56.0 | v1.21.2 |
| Last push | 2026-10-19 | 2026-10-17 |
| Release cadence | about 36 days between releases | about 10 days between releases |
| Active contributors | 6 commit authors on the default branch in the last 90 days | 32 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace AWS Verified Permissions. Alternatives to AWS Verified Permissions →
PartialCerbosPolicy-based RBAC and ABAC written in YAML and evaluated by a service you run; open core.
PartialOpen Policy AgentGeneral-purpose policy engine with the Rego language, not limited to application permissions.
Cerbos
Open Policy Agent
- v1.21.22026-10-12This release builds the OPA binary artifacts with the latest version of Go (v1.27.2), its standard library, and the gol…
- v1.21.12026-09-29This release fixes a compiler regression introduced in OPA v1.21.0.
- v1.21.02026-09-24This release contains a mix of new features and bug fixes. Notably:
- v1.20.22026-09-03This release includes a bug fix for a parser regression introduced in v1.20.0, and dependency updates.
- v1.20.12026-08-28This release includes a bug fix for a regression introduced in v1.20.0 in
Cerbos
✓ signed The latest release, v0.56.0, carries a signature GitHub verified.
Loading the security report
Open Policy Agent
unsigned The latest release, v1.21.2, carries no signature GitHub could verify.
Loading the security report