Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions hosted_logos/cedar.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
24 changes: 24 additions & 0 deletions landscape.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1139,6 +1139,30 @@ landscape:
accepted: '2024-08-23'
clomonitor_name: cartography
dev_stats_url: https://cartography.devstats.cncf.io/
- item:
name: Cedar
homepage_url: https://cedarpolicy.com
logo: cedar.svg
description: >-
Cedar is an open source authorization policy language that enables developers to express fine-grained permissions as easy-to-understand policies
enforced in their applications, and decouple access control from application logic. Cedar is designed to be ergonomic, fast, safe, and analyzable
using automated reasoning. Cedar's simple and intuitive syntax supports common authorization use-cases with readable policies, naturally expressing
concepts from role-based, attribute-based, and relation-based access control models. Cedar's policy structure enables authorization requests to be
decided quickly. Its policy validator uses optional typing to help policy writers avoid mistakes, but not get in their way. Cedar's design has been
finely balanced to allow for a sound, complete, and decidable logical encoding, which enables precise automated analysis of Cedar policies, e.g., to
ensure that policy refactoring preserves existing permissions. Cedar's language specification has been formally verified using a theorem prover to
satisfy key security properties like "deny trumps allow," and its implementation in Rust undergoes rigorous differential random testing against its
formal specification. By combining mathematical rigor with developer-friendly design, Cedar offers a practical approach to secure, maintainable
authorization for modern applications.
project: sandbox
repo_url: https://github.com/cedar-policy/cedar
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
additional_repos:
- repo_url: https://github.com/cedar-policy/cedar-access-control-for-k8s
extra:
lfx_slug: cedar
accepted: '2025-10-08'
clomonitor_name: cedar
- item:
name: Cerbos
homepage_url: https://www.cerbos.dev/
Expand Down