← Back to catalog
Cerbos · on a Docker VPS New release · v0.57.0

Your app permissions, centralized and hosted in France

🔒 VPS only

A policy-based authorization engine powered by Cerbos, to be installed and maintained by you on your VPS. Define "who can do what" in YAML — your access decisions stay on your French servers.

View compatible offers →FAQ
Hosted in FranceYAML PoliciesRBAC & ABACGDPR CompliantOfficial publisher image
Overview

What is Cerbos?

Cerbos is an open-source authorization platform that enables contextual access control based on declarative rules. It operates as a Policy Decision Point (PDP) : a separate service that evaluates permissions and renders access decisions for your applications.

The model revolves around four elements: principals (users or services), actions (create, delete, etc.), resources (protected objects), and policies (YAML files describing the rules). You define your rules in YAML, versioned in Git, and Cerbos evaluates them at runtime.

It offers two key APIs: CheckResources ("can this user access this?") and PlanResources ("what resources does this user have access to?"). It supports the transition from RBAC to ABAC with dynamic derived roles, and provides SDKs for Go, Java, JavaScript, .NET, PHP, Python, Ruby, and Rust. The focus is on simplicity, scalability, and language independence.

Compatible offers

Host Cerbos at DINAO

No managed container for Cerbos: this application is installed on a VPS hosted in France (1 vCPU / 256 Mo / 2 Go minimum).

Cerbos needs a level of access to the machine that the managed container, shared between several customers, does not give. Two VPS hosted in France: DINAO installs and manages it for you, or you administer it yourself.

Technical reason: bind mount of a host path (named volumes only in the managed offer).

Option 2 The simplest

Managed VPS with Docker and the application pre-installed

from €28,70 /month excl. VAT

  • Cerbos installed by DINAO when you order
  • The machine is yours alone: the folders Cerbos needs are created on it
  • System and Docker managed by DINAO, monitoring included
  • Priority support included (2-hour response time, DINAO business days and hours)
  • Stated, capped resources (2 vCPU, 2 GB, 20 GB): beyond that, a larger size is offered
  • Application updates on request
  • Backups as an option (€20,00 excl. VAT/month)
  • No administrator access to the machine

To use Cerbos without installing or administering anything.

Order →

Option 3 100% self-managed

VPS Docker

from €11,00 /month excl. VAT

  • Your virtual machine, full administrator access
  • Docker pre-installed, control panel of your choice
  • Free to install Cerbos or any other application, including those that drive Docker
  • Delivered empty: you install and maintain Cerbos yourself (or DINAO installs it on quotation)
  • No backup by default (optional: €20,00 excl. VAT/month)
  • No management service by default (optional from €55,00 excl. VAT/month); monitoring as an option

By default you keep full control; but without an additional service, you handle everything: maintenance, configuration, deployment.

Discover the VPS Docker →
CriterionManaged VPS with Docker and the application pre-installedVPS Docker
Who installs CerbosDINAO, when you orderNobody by default: VPS delivered with Docker and, at your choice, Portainer / Dockge, without the application. You install it, or DINAO on quotation
Application updatesDINAO, on requestYou
System and DockerDINAO, without a control panel: one VPS, one applicationYou: no management service by default (optional: €55,00 or €75,00 excl. VAT/month, business days)
BackupsOptional: €20,00 excl. VAT/month for 7 days (100 GB quota)None by default; optional: €20,00 excl. VAT/month for 7 days (100 GB quota)
MonitoringIncludedOptional: from €1,00 to €10,00 excl. VAT/month
SupportPriority handling included (2-hour response time, DINAO business days and hours, no guaranteed resolution time)Best effort
IsolationA virtual machine of your own, for this application onlyA virtual machine of your own
ResourcesSized for the OS, Docker and Cerbos: 2 vCPU, 2 GB, 20 GB, stated as a cap; beyond that, a larger size is offeredRecommended size for Cerbos: 2 vCPU, 4 GB, 50 GB; can be extended
Administrator access (root)NoYes
Applications that require privileged access to the machineYes: the machine is yours aloneYes
Starting price€28,70 excl. VAT/month€11,00 excl. VAT/month (VPS only, without the application)

Options 2 and 3 sized for Cerbos (application requirements plus the system and Docker): 2 vCPU, 2 GB, 20 GB for option 2, 2 vCPU, 4 GB, 50 GB for option 3, whose base is larger.

Under the hood

Technical details

vCPU
1 vCPU
ideal : 1 vCPU
Memory
256 Mo
ideal : 512 Mo
Disk
2 Go
ideal : 5 Go
Image : ghcr.io/cerbos/cerbos:latest Registry : ghcr.io Services : cerbos Ports : 3592, 3593
Frequently asked questions

You might be wondering…

About Cerbos 6 questions

What is the purpose of a separate authorization engine?

Cerbos removes the "who can do what" logic from each application to centralize it in a dedicated service (a Policy Decision Point). Your rules are no longer duplicated or scattered : they are written once in YAML and queried via API.

What is the difference between RBAC and ABAC?

RBAC authorizes based on roles ("admin", "editor"). ABAC goes further by relying on attributes and context (resource owner, region, status, etc.). Cerbos supports both, with dynamic derived roles.

Does Cerbos work with any language?

Yes. Cerbos is an independent service queried via API, with SDKs for Go, Java, JavaScript, .NET, PHP, Python, Ruby, and Rust. Your applications ask an authorization question and receive a decision.

Do my access decisions leave the server?

No. The engine runs on your instance hosted in France by DINAO. Your policies and authorization decisions remain under your control.

Are technical skills required?

Writing policies is the responsibility of your technical teams, but the VPS is not managed by default. You install and maintain the application yourself. Managed services (infogérance) can be added to the order as an option.

Is this application tested before it is offered?

This application has not yet passed our automatic deployment test. It can still be installed, but we invite you to contact us before ordering: we will then test it as a priority. The deployment template used was last updated on 3 July 2026. Each new version released by the publisher triggers this test again: the date above therefore follows the version actually offered.

Option 2Option 3 On a VPS 7 questions

One answer per option: the two VPS offers do not cover the same things.

Who installs Cerbos on a VPS?

Managed VPSDINAO, when you order

VPS DockerNobody by default: the VPS is delivered with Docker, without the application. You install it, or DINAO on quotation

Who updates Cerbos on a VPS?

Managed VPSDINAO, on request

VPS DockerYou

Is the VPS managed?

Managed VPSYes: DINAO manages the system and Docker, without a control panel (one VPS, one application). Monitoring is included

VPS DockerNot by default: you manage the system and Docker. The management service and monitoring can be added as options when ordering

Is my data backed up on a VPS?

Managed VPSAs an option: backup is added when ordering

VPS DockerNone by default; backup can be added as an option when ordering

Do I get administrator (root) access to the VPS?

Managed VPSNo

VPS DockerYes

Do you provide on-call support outside business hours on a VPS?

Managed VPSNo: monitoring is included, interventions take place on business days

VPS DockerNo: monitoring is an option, support is best effort

In which data centre is my service hosted?

In France, in DINAO's private racks within two third-party data centres: Free Pro in Marseille (MAR02) and Euclyde DC1 in Sophia-Antipolis. The operator provides the building, power, cooling and physical security; DINAO operates everything inside its racks, entirely and independently.