compare
Cerbos vs OpenFGA
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Cerbos | OpenFGA |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 4.6k | 6k |
| Latest | v0.56.0 | v1.22.0 |
| Last push | 2026-10-19 | 2026-10-18 |
| Release cadence | about 36 days between releases | about 15 days between releases |
| Active contributors | 6 commit authors on the default branch in the last 90 days | 12 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace AWS Verified Permissions. Alternatives to AWS Verified Permissions →
PartialCerbosPolicy-based RBAC and ABAC written in YAML and evaluated by a service you run; open core.
PartialOpenFGAZanzibar-style relationship checks instead of Cedar policies, hosted on your own infrastructure.
Cerbos
OpenFGA
- v1.22.02026-10-06Added read-replica (primary/secondary) support to the MySQL datastore backend, matching the existing PostgreSQL behavio…
- v1.21.02026-09-20Added "Dynamic Conditions" as a new experimental feature. #3313
- v1.20.02026-09-08Added WithServiceName server option to allow embedders to override the serviceName field used for the grpc_service labe…
- v1.19.02026-08-25Adds configurable pipeline optimization for weight-one difference subtract edges with high cardinality on wildcard leav…
- v1.18.32026-08-05Fixed experimental weighted_graph_check intermittently returning false when evaluating relations that cross two or more…
Cerbos
✓ signed The latest release, v0.56.0, carries a signature GitHub verified.
Loading the security report
OpenFGA
✓ signed The latest release, v1.22.0, carries a signature GitHub verified.
Loading the security report