authzed

Stream starting in 5 minutes. See you there?

Tales from the trenches - What we learned building infra on AWS, Azure and GCP YouTube video by AuthZed

We've built AuthZed Dedicated to run on AWS, Azure and GCP so we've naturally learnt a bunch of things along the way.

We're going to share those learnings with you on a livestream this Thursday

It's Office Hours format so bring any questions you have

www.youtube.com/live/CxodHTz...

We were at @cnsmunich.bsky.social this past week talking about how Google Zanzibar works

Covered in this talk:

* Why ReBAC is cool
* What the Zanzibar Model, Language and API looks like
* How it achieves low latency and consistency

Watch the entire talk here:
www.youtube.com/watch?v=mHDB...

AuthZed is 5 | The Authorization Infrastructure Event We're turning 5! Join us virtually to celebrate 5 years of AuthZed and learn about the latest in authorization infrastructure.

AuthZed is turning 5! 🎉

We’re throwing the ultimate authorization event on Aug 20 – with product announcements, a peek into our "lab," and talks from some amazing folks including

@andypavlo.bsky.social
@iritgo.bsky.social
… & more!

Details and registration here:

authzed.com/authzed-is-5

Friends don't let friends write custom authorization code.

Here's why:

🧠 Code Is Debt
🧍Authorization Is a Human Problem
⚙️ AuthZ Must Perform at Scale

Learn more here:

dev.to/sohan26/frie...

Add Observability to Your Authorization via Datadog YouTube video by AuthZed

Here's the trimmed and chapterized video which you may enjoy if any of these things interest you:

* Prometheus
* OTel
* AuthZed Dedicated
* Throughput metrics
* Datadog dashboards, and more

www.youtube.com/live/OZBJw-O...

YouTube video by AuthZed Prevent AI Agents from Accessing Unauthorized Data

Tired: AI Agents

Wired: Authorization for AI Agents

In case you missed it:

Here's how you can prevent Agentic AI from accessing unauthorized data: (demo & batteries included)

www.youtube.com/watch?v=UjKa...

A knit elephant with yarn made of blues, purples, and pinks.

As someone that normally avoids swag, @posetteconf.com gave out some really good speaker gifts! In general, it's a really well thought out and executed conference! It was a pleasure presenting there.

We go live in 2 minutes. See ya there 👋

YouTube video by AuthZed Prevent AI Agents from Accessing Unauthorized Data

New video drop 🖐️ 🎤

Everyone's talking about AI Agents but what about the access control mechanisms for these agents?

In this video we break down techniques to add Authorization for AI Agents in RAG Pipelines. Demo included ➡️

youtu.be/UjKa5T1dIVw?...

Add Observability to Your Authorization via Datadog YouTube video by AuthZed

Learn about Observability, SpiceDB and DataDog by joining our livestream later this week. It's Office Hours format so feel free to bring your questions too ✨

youtube.com/live/OZBJw-O...

(Don't forget to hit the Notify Me button)

If only someone knew of system that can scale to store all of access control data necessary to lock these systems down.

Only half joking, but glad to be a part of the story for keeping AI systems in check.

AuthZed Brings Additional Observability to Authorization via the Datadog Integration Gain instant visibility into your authorization layer with AuthZed’s new Datadog integration. Stream SpiceDB metrics—latency, cache efficiency, datastore performance, and more—into the dashboards you ...

AuthZed is bringing additional observability to authorization via Datadog.

All critical infrastructure should be observable and authorization is no exception. Get insight into authorization performance, latency, and anomalies without any additional overhead

Read More: authzed.com/blog/authzed...

YouTube video by AuthZed Modeling GitHub in SpiceDB

Here's a question to start your week:

If you were to build a Github-like application, how would you model the complex permissions system?

This is a much harder problem than you think.

This video is an in-depth look into how you would model Github's permissions.

www.youtube.com/watch?v=x3-B...

YouTube video by AuthZed What is Relationship-Based Access Control aka ReBAC? #authorization #rbac #appsecurity

Taking a break from work?

Here's a 1-minute video on what Relationship-Based Access Control is

www.youtube.com/shorts/y9E64...

And now you know 💡

Today we launched Authorization Infrastructure for AI - with official support for RAG & Agentic AI.

AI needs robust access control. Else it can leak data, cross tenant lines, or act out of bounds.

Read how you can build scalable, cloud-native AuthZ for AI with SpiceDB:

authzed.com/blog/authzed...

How does Google Zanzibar  prevent 500,000 internal RPCs per second from hitting the database?

The magic lies in how Zanzibar handles hotspots. Here's a deep-dive video into the techniques used to achieve this.

www.youtube.com/watch?v=8sgk...

GitHub - authzed/workshops: The repository for self-guided SpiceDB workshops The repository for self-guided SpiceDB workshops . Contribute to authzed/workshops development by creating an account on GitHub.

In the mood to learn something new?

Check out our workshops repo on Github.

We currently have 3 self-guided workshops inc. 'Updating WebViews based on Permissions' and newest on 'Preventing AI Agents from Accessing Unauthorized Data'

Don't forget to ⭐ the repo here:
github.com/authzed/work...

Have you written a line of code that looks like this?

Then you're probably doing Authorization wrong.

Our latest video explores why this is the case - from the lens of technical debt, people, and also performance at scale.

We discuss this here:
www.youtube.com/watch?v=qGtG...

Building Better Authorization Infrastructure With Arm: Benefits From Laptop To Cloud AuthZed uses Arm from laptop to cloud to boost dev speed, cut costs, and scale secure, high-performance authorization infrastructure.

Today we were featured on the Arm Community blog talking about how we love Arm ❤️

Arm helps AuthZed build and operate authorization infrastructure, from day-to-day productivity gains to cost-effective, performant cloud compute.

Learn more here:
community.arm.com/arm-communit...

Starting in five minutes! ➡️ ➡️

Updating A Web View Based on Permissions In this livestream Julian Leonard (Solutions Engineer @ AuthZed) will show how you can update a webview based on what permissions the user has. The demo will use a NextJS template by Vercel for an a...

How do you update a user interface based on what permissions the user has? Join our livestream to learn:

* NextJS
* Tailwind CSS
* Postgres (via Neon)
* SpiceDB

It's Office Hours format so bring any questions you might have.

www.youtube.com/live/ooWQ903...

Hiring alert!
This is a unique opportunity to join AuthZed as a ✨Front-End Engineer✨
Have you built powerful & intuitive dashboards? Dev tools? Familiar with Kubernetes? We'd love to talk to you.
More info:
www.ycombinator.com/companies/au...

YouTube video by AuthZed Build a Model Context Protocol (MCP) Server for SpiceDB with Claude

Everyone's talking about MCP and so are we!

Dominik Guhr from @innoq.bsky.social is joining us to talk about Model Context Protocol, and SpiceDB.

We have a little demo lined up but will also talk about some of the authorization implications of MCP. Starts soon!

www.youtube.com/watch?v=DG0J...

Come watch the stream for the (unironically!) great personalized opening song

Stay for all the cool insights about Authorization.

Also @rawkode.dev is such a good host 😎

JWTs cannot be meaningfully revoked.

This should be the end of the discussion and enough to make people immediately stop.

YouTube video by AuthZed Don't use JWTs for Authorization!

New video drop and it's a hot take 🔥

Don't use JWTs for Authorization!

youtu.be/_cgcg-h4vJs?...

Absolutely! Which is why it's good for the ecosystem that there is discourse early on around security for MCP.

Build a Model Context Protocol (MCP) Server with Access Management using ReBAC YouTube video by AuthZed

We need to have more conversations around Model Context Protocol (MCP) and security.

So we're going to do just that on next week's livestream!

We're chatting with Dominik Guhr from @innoq.bsky.social about building a MCP Server with Access Management, using SpiceDB

youtube.com/live/DG0J_zc...

Photos from a whirlwind Day 2 and 3 of Kubecon! We co-hosted a great party, had a lovely chat with Techstrong.IT and also met with hundreds of Kubecon attendees

#Kubecon