The Identity Map / AuthZ

Authorization & Fine-Grained Access (AuthZ & PBAC)

Deciding what an authenticated identity is allowed to do: policy-based, relationship-based, and attribute-based access control.

Authentication proves who you are; authorization decides what you can touch. This developer-led niche externalizes that decision out of application code and into a dedicated policy engine, using models like ReBAC (Google Zanzibar style), ABAC, and policy-as-code. It is one of the youngest and fastest-moving branches of the tree, and increasingly the control point for AI agents acting on a user's behalf.

9 vendors on this branch