Skip to content
@ory

Ory

Web-scale, market-proven open source identity access and permission services

Ory - Open-source identity and access infrastructure

Ory: Open-source identity and access infrastructure for modern applications

Ory provides scalable, flexible, and secure identity and access management (IAM) solutions that empower developers to build innovative applications. Whether you handle billions of users or launch a startup, Ory makes security and compliance simple with open-source transparency and cutting-edge tools.

Why engineers choose Ory

  • API-first identity management: Ory offers a developer-friendly, headless approach to user authentication and management with seamless frontend and backend integration.
  • Modern access control: Add fine-grained permissions, relationship-based access control (RBAC/ABAC), and Zero Trust principles with Ory's high-performance tools.
  • Web-grade scalability: Built with cloud-native technologies, Ory scales effortlessly to support hundreds of millions of active users and devices for the largest websites in the world.
  • Best-in-class security: Meet stringent security standards with passwordless login, multi-factor authentication (MFA), and adherence to GDPR and other privacy regulations.
  • Modular architecture: Use what you need—identity, OAuth2, permissions—without overhauling your stack, and extend functionality with custom integrations.
  • Open-source transparency: Fully audit, customize, and contribute to Ory’s codebase for ultimate flexibility.
  • Developer tools and community: Access extensive documentation, SDKs, CLI tools, and join a vibrant community of engineers solving modern security challenges.

Got questions or need help choosing the right solution for your needs? The Ory team is here to help! Contact Ory today to speak to an expert.

Ory tools and services

Ory Network

Ory Network is a managed IAM service that provides:

  • Pre-built components: Ready-to-use login, registration, and account recovery flows.
  • Scalable infrastructure: Automatic scalability with low-latency APIs.
  • Advanced security: Threat prevention and privacy compliance such as GDPR.
  • Developer support: SDKs for popular languages and customizable ReactJS components.

Sign up for free and focus on building your application while Ory handles the complexity of IAM.

Ory self-hosted

For businesses looking to self-host

  • Ory Enterprise License: Unlock enterprise-grade features like security SLAs for CVEs, SAML, B2B organizations, multi-tenancy, and better scalability.

Contact Ory experts to learn more.

Trusted, verified, and hardened: Ory open-source

Developer resources

Join the Ory community

Ory is looking for developers, technical writers, and open-source contributors to make IAM for everyone.

Learn more

Secure your app with Ory’s open-source identity and access solutions. Build with confidence, innovate faster, and join a global community of engineers shaping the future of application security.

Pinned Loading

  1. lumen lumen Public

    Save 30% token costs when using Claude Code, Codex, OpenCode for free - with open source, local semantic search. Works for small and large codebases and monorepos! Enterprise-ready and fully compli…

    Go 255 30

  2. talos talos Public

    Web-scale and security-hardened API key server for users, services, machine to machine, and AI agents. Token derivation brings fine-grained capability tokens to avoid common API key pitfalls. Apach…

    Go 193 11

  3. hydra hydra Public

    Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service …

    Go 17.5k 1.6k

  4. kratos kratos Public

    Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OID…

    Go 13.9k 1.2k

  5. keto keto Public

    The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, …

    Go 5.4k 387

  6. oathkeeper oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust whi…

    Go 3.6k 415

Repositories

Showing 10 of 190 repositories
  • terraform-provider-ory Public

    Terraform provider for managing Ory Network resources — identities, OAuth2 clients, permissions, organizations, projects, and more.

    ory/terraform-provider-ory's past year of commit activity
    Go 21 Apache-2.0 4 1 4 Updated Sep 9, 2026
  • sdk Public

    The place where Ory's SDKs are being auto-generated

    ory/sdk's past year of commit activity
    PHP 178 Apache-2.0 96 53 4 Updated Sep 8, 2026
  • saml20 Public

    SAML 2.0 parser for Node.js

    ory/saml20's past year of commit activity
    TypeScript 16 MIT 11 2 1 Updated Sep 8, 2026
  • oathkeeper-maester Public

    Kuberenetes CRD Controller for Ory Oathkeeper. ⚠️ Maintained by the community, not an official Ory project!

    ory/oathkeeper-maester's past year of commit activity
    Go 36 Apache-2.0 23 5 (1 issue needs help) 10 Updated Sep 8, 2026
  • k8s-toolbox Public
    ory/k8s-toolbox's past year of commit activity
    Shell 3 Apache-2.0 2 1 3 Updated Sep 7, 2026
  • hydra-maester Public

    Kuberenetes CRD Controller for Ory Hydra. ⚠️ Maintained by the community, not an official Ory project!

    ory/hydra-maester's past year of commit activity
    Go 46 Apache-2.0 54 7 (1 issue needs help) 15 Updated Sep 7, 2026
  • talos Public

    Web-scale and security-hardened API key server for users, services, machine to machine, and AI agents. Token derivation brings fine-grained capability tokens to avoid common API key pitfalls. Apache2 open source for indie deployments, commercial for scalable and HA.

    ory/talos's past year of commit activity
    Go 193 Apache-2.0 11 0 5 Updated Sep 7, 2026
  • keto Public

    The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

    ory/keto's past year of commit activity
    Go 5,398 Apache-2.0 387 46 (6 issues need help) 28 Updated Sep 4, 2026
  • codex-plugins Public

    Ory for Codex

    ory/codex-plugins's past year of commit activity
    Shell 0 Apache-2.0 0 1 0 Updated Sep 4, 2026
  • gemini-cli-extension Public

    Ory bundled into Gemini CLI: skills and TOML slash commands that scaffold Ory authentication into your codebase, a local Ory stack you can spin up in one command, and (when pointed at an Ory project) authentication, authorization, and audit for every tool Gemini runs.

    ory/gemini-cli-extension's past year of commit activity
    JavaScript 0 0 0 0 Updated Sep 4, 2026