ORY
The open-source, developer-friendly platform for authentication, authorization, and permissions.
GitHub Stars
30k+
Monthly Downloads
1B+
Community Members
15k+
Global Network Latency
<10ms
About ORY
ORY is a comprehensive identity and access control platform built on a set of powerful open-source projects. It includes ORY Kratos for identity management (login, MFA, social sign-in), ORY Hydra as a certified OAuth 2.0 and OpenID Connect provider for API security, ORY Keto for flexible, relationship-based permission management (RBAC/ABAC), and ORY Oathkeeper as an Identity and Access Proxy. This modular design allows developers to use individual components or the entire integrated platform. ORY offers both self-hosting for maximum control and a managed cloud service, the ORY Network, which provides a globally distributed, low-latency infrastructure.
Core Open Source Products
Ory Kratos
Identity and user management system. Handles registration, login, 2FA, social sign-in, and account recovery.
Ory Hydra
Certified OAuth 2.0 and OpenID Connect (OIDC) server for securing APIs and third-party access.
Ory Keto
Relationship-based authorization and permission server. Implements Google Zanzibar model for access control.
Ory Oathkeeper
Identity & Access Proxy (IAP) that authenticates and authorizes all incoming traffic to your services.
ORY Network (Cloud Platform)
Architecture
Fully managed, globally distributed, low-latency cloud service running the ORY open source stack.
Features
Includes a developer console (ORY Console), customizable UI elements, analytics, and enterprise-grade support.
Pricing Tiers
Offers a free developer tier, a usage-based Essentials plan, and a custom Enterprise plan.
Developer Experience
Sdks
Provides official SDKs for multiple languages including Go, Python, Java, .NET, and JavaScript/TypeScript.
Deployment
Can be self-hosted using Docker and Kubernetes or consumed as a managed cloud API.
Standards Compliance
Certified for OpenID Connect (OIDC) and follows standards like OAuth 2.0/2.1, FIDO2, and passkeys.