VP, DevRel

Permit.io
Permit.io provides a no-code authorization platform that enables teams to manage permissions using Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Relationship-Based Access Control (ReBAC) through a simple API and policy editor. The platform eliminates the need for developers to rebuild access control systems, allowing for rapid integration and management of permissions directly within applications.
- Developer Tools
- Enterprise Software
- Software Only
Funding
Raised to date
$14MRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
across 2 rounds



9RV+1$8M · Series A
Announced Feb 2024
Disclosed cumulative: $14M
Founders
Product
Problem
Developing and managing access control within applications can be complex and time-consuming, requiring developers to build and maintain custom authorization systems. This often leads to inconsistencies, security vulnerabilities, and increased development overhead.
Solution
Permit.io offers a full-stack authorization platform that simplifies permission management for applications. The platform provides a no-code policy editor and a suite of APIs and SDKs, enabling teams to implement and manage Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Relationship-Based Access Control (ReBAC) models. Permit.io generates transparent policy as code based on Open Policy Agent's (OPA) Rego or AWS' Cedar, ensuring policies are managed as code in Git and controlled via a simple API. This allows developers to focus on core product features while ensuring consistent and secure access control across the application stack.
Target Audience
Permit.io targets development teams, security engineers, and DevOps professionals who need a centralized and scalable solution for managing application authorization.
Features
- No-code policy editor for defining and managing permissions
- Support for RBAC, ABAC, and ReBAC authorization models
- Policy-as-code generation using OPA's Rego or AWS' Cedar
- GitOps integration for managing policies in a cloud-native flow
- APIs and SDKs for integrating authorization into applications, infrastructure, and API gateways
- Hybrid model with zero-latency authorization decisions made on the customer's side
- Customizable access control elements, including user management, approval flows, and audit logs
- Integration with authentication providers such as Auth0, AWS Cognito, and Okta
- Terraform provider for managing Permit.io resources as infrastructure-as-code