sonnora@systems:~/projects/userbrew$ cat README
UserBrew — zero-trust IAM for the enterprise.
Zero-trust Identity and Access Management for enterprise ecosystems. Built on Rust with WebAuthn support, UserBrew provides authentication and authorization that doesn't assume trust from the network layer.
// the problem
Trust is a vulnerability. Zero-trust is the fix.
Traditional IAM systems assume that once you're inside the network perimeter, you can be trusted. That assumption is the root of most modern breaches — lateral movement, privilege escalation, insider threats.
UserBrew treats every request as untrusted until proven otherwise. Every access decision is evaluated against policy at runtime — no cached privileges, no implicit network trust, no standing access.
// features
Built for modern security requirements
WebAuthn / Passkeys
Native WebAuthn support for passwordless authentication using platform authenticators — biometrics, security keys, and passkeys.
Policy Engine
Attribute-based access control (ABAC) engine that evaluates user attributes, resource sensitivity, context, and environmental signals before granting access.
Session Management
Just-in-time session issuance with automatic expiry, rotation, and revocation. No long-lived tokens, no stale sessions.
Audit Trail
Every authentication decision, policy evaluation, and access grant is logged to an immutable audit trail for compliance and forensics.
// connect
Ready to eliminate implicit trust from your ecosystem?
Get in touch about deployments, custom policy integration, or an evaluation.