← CSI Knowledge

AuthZed / SpiceDB

name
AuthZed / SpiceDB
source
Notion CSI Technology Register
csi_tech_id
133
category
Cyber Security
csi_classification
Assessment Pending
lifecycle_status
Not started
client_approved
No
commercial_use
Requires Review
current_version
Rolling SpiceDB release; pin stable
risk_flag
High Risk
official_url
https://authzed.com/pricing
documentation_url
https://authzed.com/docs/
last_verified
August 4, 2026
migration_status
Imported
tags
csi-technology-register, notion-migration
06-Cybersecurity/AuthZed - SpiceDB.md

AuthZed / SpiceDB

Purpose

Relationship-based authorization database/service inspired by Google Zanzibar.

Decision Summary

Powerful application authorization infrastructure; requires formal schema review and HA design.

Use Cases

Fine-grained app authorization, multi-tenant permissions, sharing, hierarchical roles and centralized permission checks.

Field Notes

Schema mistakes can expose tenants. Default deny, test negative cases, protect keys and remember SpiceDB is not authentication.

Hardware Requirements

Container/Kubernetes, supported datastore, TLS, low-latency networking and HA matching permission-check criticality.

Backup Strategy

Schema, relationship datastore, configs, preshared keys, manifests, migrations and authorization tests.

Recovery Strategy

Restore compatible datastore/pinned release, validate schema and run positive/negative permission tests before traffic.

Secure Boot Notes

Not directly applicable to this software/service. Secure Boot depends on the host OS, endpoint or hypervisor; keep it enabled where supported.

Version History

Actively maintained rolling releases; pin exact stable version before production.

Technology Register Metadata

  • CSI Classification: Assessment Pending
  • CSI Tech ID: 133
  • Category: Cyber Security
  • Client Approved: No
  • Commercial Use: Requires Review
  • Current Version: Rolling SpiceDB release; pin stable
  • Deployment: Native
  • Docker Support: Official
  • Documentation URL: https://authzed.com/docs/
  • Evidence Complete: Yes
  • Last Updated: August 4, 2026 2:53 AM
  • Last Verified: August 4, 2026
  • Licence: SpiceDB Community Apache-2.0; AuthZed Cloud, Dedicated and Enterprise are commercial.
  • Lifecycle Status: Not started
  • OS Support: Linux, Web
  • Official URL: https://authzed.com/pricing
  • Offline Support: No
  • Risk Flag: High Risk
  • Ventoy Compatibility: Not Applicable

Migration Record

Imported deterministically from the CSI Technology Register.

Source classifications, approval state, risk state, version information and testing status have been preserved. No additional approval or validation has been inferred during migration.

Cyber Space Infocom
Making Technology Work for You