Permit.io provides a no-code authorization platform that enables teams to manage permissions using Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Relationship-Based Access Control (ReBAC) through a simple API and policy editor. The platform eliminates the need for developers to rebuild access control systems, allowing for rapid integration and management of permissions directly within applications.
Funding
$14M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
9RVVVFounders
Product
Problem
Developing and managing access control within applications can be complex and time-consuming, requiring developers to build and maintain custom authorization systems. This often leads to inconsistencies, security vulnerabilities, and increased development overhead.
Solution
Permit.io offers a full-stack authorization platform that simplifies permission management for applications. The platform provides a no-code policy editor and a suite of APIs and SDKs, enabling teams to implement and manage Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Relationship-Based Access Control (ReBAC) models. Permit.io generates transparent policy as code based on Open Policy Agent's (OPA) Rego or AWS' Cedar, ensuring policies are managed as code in Git and controlled via a simple API. This allows developers to focus on core product features while ensuring consistent and secure access control across the application stack.
Target Audience
Permit.io targets development teams, security engineers, and DevOps professionals who need a centralized and scalable solution for managing application authorization.
Features
- No-code policy editor for defining and managing permissions
- Support for RBAC, ABAC, and ReBAC authorization models
- Policy-as-code generation using OPA's Rego or AWS' Cedar
- GitOps integration for managing policies in a cloud-native flow
- APIs and SDKs for integrating authorization into applications, infrastructure, and API gateways
- Hybrid model with zero-latency authorization decisions made on the customer's side
- Customizable access control elements, including user management, approval flows, and audit logs
- Integration with authentication providers such as Auth0, AWS Cognito, and Okta
- Terraform provider for managing Permit.io resources as infrastructure-as-code