Stop writing if-statements for permissions. Compatible with AWS Cedar. Battle-tested. Developer-friendly.
Hundreds of if-statements. Nested permissions. Multi-role logic. Your codebase becomes a mess.
Design, implement, test, debug. Meanwhile, your actual product features wait.
One wrong if-statement = security breach. Testing all edge cases is impossible.
FastAuth gives you enterprise-grade authorization without the enterprise headache. Three lines of code. Zero infrastructure. Compatible with AWS Cedar—the same tech powering AWS Verified Permissions.
Get Early Access// Check authorization in 3 lines const result = await fastauth.authorize({ action: 'edit', resource: { type: 'document', id: 'doc_123', owner: 'alice' } }); if (result.decision === 'Allow') { // User is authorized ✓ }
Battle-tested policy engine used by AWS. Enterprise-proven, developer-friendly.
See exactly which policies matched. Debug authorization issues in seconds.
Users can have different roles across resources. Perfect for SaaS platforms.
0.2ms response time. 4,400 requests/second per instance. Zero database lookups.
Stateless service. No Redis, no Postgres. Just fast authorization decisions.
RESTful API, SDKs for all languages, comprehensive docs. Start in minutes.
10,000 requests per month, free forever. Perfect for side projects.
Audit logs included. JWT auth. SOC 2 compliant (coming soon).
{
"action": "edit",
"resource": {
"type": "document",
"id": "doc_123",
"owner": "alice"
}
}
{
"userId": "alice",
"role": "Editor"
}
{
"decision": "Allow",
"evaluationTimeMs": 0.226,
"matchedPolicies": ["policy_editor_owns"]
}
✓ Alice can edit doc_123
Reason: Owner permission
{
"action": "delete",
"resource": {
"type": "document",
"id": "doc_456",
"owner": "bob"
}
}
{
"userId": "alice",
"role": "Viewer"
}
{
"decision": "Deny",
"evaluationTimeMs": 0.198,
"matchedPolicies": []
}
✗ Alice cannot delete doc_456
Reason: Not owner + Viewer role
{
"action": "read",
"resource": {
"type": "project",
"id": "proj_789",
"workspace": "Engineering"
}
}
{
"userId": "charlie",
"roles": [
{"role": "Admin", "workspace": "Engineering"},
{"role": "Viewer", "workspace": "Marketing"}
]
}
{
"decision": "Allow",
"evaluationTimeMs": 0.243,
"matchedPolicies": ["policy_admin_engineering"],
"effectiveRole": {
"role": "Admin",
"workspace": "Engineering"
}
}
✓ Charlie can read proj_789
Used: Admin role in Engineering
See the actual policies behind the playground examples above
This policy grants edit permission when the user is the document owner.
// Cedar Policy permit( principal, action == Action::"edit", resource ) when { principal.userId == resource.owner };
alice (Editor role)editdoc_123 owned by aliceViewers only have read permission. No policy grants delete, so it's denied by default.
// Cedar Policy - Only allows reading permit( principal, action == Action::"read", resource ) when { principal.role == "Viewer" }; // No policy allows "delete" for Viewer role // Result: DENY by default
alice (Viewer role)deletedoc_456 owned by bobAdmins have full access to all resources within their workspace.
// Cedar Policy - Admin full access permit( principal, action in [ Action::"read", Action::"edit", Action::"delete" ], resource ) when { principal.role == "Admin" && principal.workspace == resource.workspace };
charlie (Admin in Engineering)readproj_789 in Engineering workspaceWrite policies in plain English-like syntax. Cedar handles the complexity.
Start Using Cedar PoliciesAuth0 focuses on authentication (who you are), while FastAuth focuses on authorization (what you can do). We're compatible with AWS Cedar, giving you enterprise-grade policies without the complexity. Plus, we're 4x faster and more transparent—you see exactly which policies granted access.
Yes! FastAuth handles authorization only, so it works alongside your existing authentication (Auth0, Firebase, custom JWT). You keep your current login flow and add FastAuth for permission checks. Migration guides coming soon.
Absolutely. FastAuth is stateless—we don't store your data. All context is passed in each request. We use industry-standard JWT authentication, TLS encryption, and follow AWS security best practices. SOC 2 compliance coming Q2 2027.
10,000 authorization requests per month, all core features including multi-role support, policy debugging, and community support. Perfect for side projects, MVPs, and early-stage startups. No credit card required.
Be among the first to get access. No spam, ever.