Can I try Cerbos for free?

Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan Cerbos needs, that covers your first 2 months.

How do I install Cerbos?

Pick Cerbos from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure. It comes up on a hostname with HTTPS already working.

What does hosting Cerbos cost?

Cerbos needs at least 512 MB memory, so the Nano subscription at $2.00/mo is the smallest that fits it. That size is a close fit for Cerbos on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.

Do I get access to the Cerbos files and database?

Yes. Every app has a browser shell into its container, SFTP for its files. Your data is yours and you can take it out whenever you want.

Are updates to Cerbos automatic?

Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app.

Can I use my own domain for Cerbos?

Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.

Can I back Cerbos up?

Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.

Developer tools

Cerbos Hosting

Evaluate application authorization policies through a protected HTTP API. Deploy it in one click on Caliber Node — no compose file, no server to prepare, HTTPS working the moment it boots.

Deploy Cerbos

From $2.00/mo on the Nano subscription

$5.00 free credit when you sign up — your first 2 months of Cerbos, free

One click
Deploys in: 512 MB
Memory needed: Not required
Database: $2.00/mo
From

What you get

Cerbos runs on a subscription — a pool of CPU, memory and disk that you own. Deploying it takes one click, and the same pool will run your other apps at no extra charge.

A hostname with HTTPS, immediately

Your app is reachable the moment it finishes deploying, on a certificate we issue and renew. Point your own domain at it whenever you like.

Nothing exposed but the app

Only Cerbos itself gets a public port. Anything it depends on stays on a private network unreachable from the internet.

A shell and SFTP

A real shell in the container and SFTP for its files. This is not a black box — if you want to get in and look, you can.

Updates you control

We check nightly for a new image and tell you when one lands. Applying it is your decision, per app, and a failed update rolls back to the exact image it replaced.

A free snapshot

One full archive of Cerbos included, restorable in a click. Keep more with the snapshots add-on.

Your data, exportable

SFTP access to everything the app stores. Nothing here is locked in.

What actually runs

No mystery images. Cerbos deploys 2 containers, and these are exactly the ones:

ghcr.io/cerbos/cerbos@sha256:540643bc67ba628011a150ad1d3370f285daa38995be5cd7a4be181da902bec1worker
caddy@sha256:d8542f48d34a9cf4e4c11a478865229840e87e4c96ea3f439101f31a5d35f75fweb

Running Cerbos yourself vs. running it here

Cerbos is free software and you can absolutely run it yourself — we would rather tell you that than pretend otherwise. What you are paying for here is the part around it.

On your own server

You write the compose file and keep it working
You configure a reverse proxy and renew certificates
You watch for new releases and apply them
You own the backups, and finding out they were broken

On Caliber Node

One click, and it is running on HTTPS
Certificates issued and renewed for you
Update checks nightly, applied when you say so
A free snapshot, restorable in a click

Questions about Cerbos hosting

Can I try Cerbos for free?: Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan Cerbos needs, that covers your first 2 months.
How do I install Cerbos?: Pick Cerbos from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure. It comes up on a hostname with HTTPS already working.
What does hosting Cerbos cost?: Cerbos needs at least 512 MB memory, so the Nano subscription at $2.00/mo is the smallest that fits it. That size is a close fit for Cerbos on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.
Do I get access to the Cerbos files and database?: Yes. Every app has a browser shell into its container, SFTP for its files. Your data is yours and you can take it out whenever you want.
Are updates to Cerbos automatic?: Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app.
Can I use my own domain for Cerbos?: Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.
Can I back Cerbos up?: Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.

More developer tools apps

Nginx hosting

Publish a fast static website from your own files, with an optional Nginx configuration for advanced web-server use.

PGVector Studio hosting

Experiment with vector embeddings in a private PostgreSQL database using the pgAdmin web interface.

GitLab CE hosting

Host Git repositories, code reviews, issues and CI/CD in GitLab Community Edition.

Semaphore Runner hosting

A separate automation runner for your Semaphore UI server, with persistent registration and a setup/status page.

Semaphore UI hosting

Run and schedule Ansible playbooks and infrastructure automation with a web interface, private PostgreSQL database and optional remote runners.

Atuin Sync Server hosting

Synchronize encrypted shell history between your Atuin clients using your own sync server.

Browse the whole catalog

Deploy Cerbos in a click

Cerbos, running on resources you own, with HTTPS and a free snapshot included.

Deploy Cerbos View pricing