Product Roadmap

Building the future of access governance

A high-level view of where Big ACL is headed. We ship continuously, so this roadmap reflects direction rather than fixed timelines.

Available now

Live

Natural language policy authoring

Write access rules in plain English, understood by both business and security teams.

AI-powered formalization

Automatically structure and formalize policies from natural language input.

Rego & Cedar translation

Generate enforcement-ready policies for OPA and Amazon Verified Permissions.

OPA bundle distribution

Serve Rego bundles to your OPA instances with status tracking.

AVP sync

Synchronize Cedar policies to Amazon Verified Permissions policy stores.

Policy versioning & environments

Git-like versioning with promotion across staging and production environments.

Access reviews (recertification)

Launch review campaigns to certify, revoke, or delegate access periodically.

SCIM provisioning

Automatically sync users and groups from your identity provider via SCIM.

Decision log collection

Collect and centralize decision logs from OPA and other PDPs for audit.

Coming next

Planned

Technical foundations

Static policy analysis

Planned

Application templates

Planned

Obligations & advice

Planned

Ecosystem integrations

SIEM export

Planned

GitOps export/import

Planned

ITSM integration

Planned

Operational governance

Compliance dashboard

Planned

On our radar

Exploring

Identity governance (IGA)

Extend beyond authorization into full identity lifecycle management.

Continuous certification

Trigger access reviews automatically based on risk signals and events.

Infrastructure policies

Govern access to Kubernetes, Terraform, and cloud infrastructure resources.

Shared Signals (SSF/CAEP)

React to real-time security events with the Shared Signals Framework.

API Gateway policies

Push authorization policies directly to API gateways for edge enforcement.

Want to shape what's next?

We build Big ACL alongside our users. Share your use case, vote on features, or tell us what's missing.

Get in touch