Topaz

by Aserto

Free Download 1 Visit Website

Versions:

  • 0.33.12
  • 0.33.5
  • 0.33.4
  • 0.33.3
  • 0.33.2
  • 0.32.61
  • 0.32.60
  • 0.32.59
  • 0.32.58
  • 0.32.57
  • 0.32.56
  • 0.32.55
  • 0.32.52
  • 0.32.50
  • 0.32.49
  • 0.32.47
  • 0.32.43
  • 0.32.41
  • 0.32.38
  • 0.32.35
  • 0.32.33
  • 0.32.32
  • 0.32.31
  • 0.32.30
  • 0.32.29
  • 0.32.28
  • 0.32.26
  • 0.32.25
  • 0.32.23
  • 0.32.22
  • 0.32.21
  • 0.32.20
  • 0.32.19
  • 0.32.18
  • 0.32.17
  • 0.32.16
  • 0.32.15
  • 0.32.14
  • 0.32.13
  • 0.32.12
  • 0.32.11
  • 0.32.10
  • 0.32.9
  • 0.32.8
  • 0.32.7
  • 0.32.6
  • 0.32.5
  • 0.32.4
  • 0.32.3
  • 0.32.2
  • 0.32.1
  • 0.32.0
  • 0.31.11
  • 0.31.10
  • 0.31.9
  • 0.31.8
  • 0.31.7
  • 0.31.6
  • 0.31.4
  • 0.31.3
  • 0.31.1
  • 0.31.0
  • 0.30.32
  • 0.30.31
  • 0.30.30
  • 0.30.29
  • 0.30.28
  • 0.30.26
  • 0.30.25
  • 0.30.24
  • 0.30.23
  • 0.30.22
  • 0.30.21
  • 0.30.16
  • 0.30.15
  • 0.30.14
  • 0.30.13
  • 0.30.12
  • 0.30.11
  • 0.30.10

Topaz 0.33.12, published by Aserto, is an authorization micro-service that combines Relationship-Based Access Control (ReBAC) and Attribute-Based Access Control (ABAC) in a single, lightweight binary. Designed to be embedded directly inside an application or deployed as a sidecar, it evaluates fine-grained permissions in real time by consuming policy bundles authored in the Open Policy Agent (OPA) Rego language. Typical use cases include enforcing multi-tenant isolation in SaaS platforms, granting row-level security in analytical dashboards, and propagating user-to-resource relationships such as “owner,” “editor,” or “viewer” across micro-services without centralizing all identity data. The engine keeps an in-memory graph of relationships, allowing depth-based queries like “can this service account impersonate a user who is a member of a team that owns the document?” to be answered in sub-millisecond latency. Topaz exposes a REST and gRPC authorization endpoint compatible with the OpenAPI 3 and gRPC Health Checking protocols, so existing gateways or service meshes can call it without additional SDKs. Administrators package policies, relationship data, and attribute schemas into versioned OCI images that can be cached locally, making the service fully stateless and horizontally scalable. Since its first release, the project has shipped 80 successive versions, iterating on performance, audit logging, and integrations with identity providers such as Auth0, Azure AD, and Okta. The software is classified under Development Tools / Security & Encryption. Topaz is available for free on get.nero.com, with downloads delivered through trusted Windows package sources such as winget, always supplying the latest build and supporting batch installation alongside other applications.

Tags:

abac 1
access-control 2
api 28
authorization 1
cloud-native 10
golang 87
opa 1
rbac 1
rebac 1
security 156
zanzibar 1