Aserto

Aserto is worth adding because it represents a very practical commercial answer to fine-grained authorization for applications and APIs. The official site positions it around resource-level access control, central policy management, and low-latency authorization checks. It also explicitly says the platform is built on an open foundation including Topaz, Open Policy Agent, and a Zanzibar-inspired directory model. That matters editorially because Aserto is not just another generic auth company. It sits in the product authorization layer where teams need RBAC, ABAC, or ReBAC decisions to happen consistently and in real time across applications.

Its pricing posture should be described honestly. The public site is strong on product positioning and architecture, but it does not expose a clean self-serve pricing table on the checked pages. The buying motion is clearly contact-led, with 'Speak with an engineer' and demo pathways rather than public list pricing. That still makes it a useful directory entry because the category includes both OSS-first and commercial authorization systems, but Aserto should be framed as a quote-led platform rather than a self-serve tool with transparent public rates.