compare
Cerbos vs SpiceDB
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Cerbos | SpiceDB |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 4.6k | 7.2k |
| Latest | v0.56.0 | v1.56.2 |
| Last push | 2026-10-19 | 2026-10-18 |
| Release cadence | about 36 days between releases | about 34 days between releases |
| Active contributors | 6 commit authors on the default branch in the last 90 days | 13 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace AWS Verified Permissions. Alternatives to AWS Verified Permissions →
PartialCerbosPolicy-based RBAC and ABAC written in YAML and evaluated by a service you run; open core.
PartialSpiceDBZanzibar-style relationship checks instead of Cedar policies, run on your own infrastructure.
Both replace Oso Cloud. Alternatives to Oso Cloud →
PartialCerbosDeclarative authorization policies evaluated by your own service instead of a hosted one.
PartialSpiceDBRelationship-based permissions in the style of Google Zanzibar, self-hosted instead of a hosted service.
Cerbos
SpiceDB
- v1.56.22026-09-11Increase the timeout for datastore readiness checks to account for the possibility of far away databases
- v1.56.12026-08-26Schema compilation: reduce memory usage when caveats are involved
- v1.56.02026-07-24New metric check_permissionship_total for CheckPermission and CheckBulkPermissions that counts the number of requests t…
- v1.54.02026-06-18Prevent cache poisoning. The dispatch Check cache key now incorporates check hints. See
- v1.53.02026-05-13Add DispatchExecutor, a query plan executor that is Dispatch-aware and sends subproblems on Alias boundaries
Cerbos
✓ signed The latest release, v0.56.0, carries a signature GitHub verified.
Loading the security report
SpiceDB
✓ signed The latest release, v1.56.2, carries a signature GitHub verified.
Loading the security report