Ory
Open-source identity, authentication, and access control
Ory is profiled here as a Authentication tool for engineering teams. Read about features, pricing, and how it compares to related options in the tools directory.
Description
Ory is an open-source identity ecosystem, started by Aeneas Rekkas, that splits authentication and authorization into composable services a team can run themselves. Ory Kratos handles user management and login flows, Hydra provides a certified OAuth 2.0 and OpenID Connect server, Keto enforces fine-grained permissions, and Oathkeeper acts as an identity-aware proxy. The projects are licensed under Apache 2.0 for self-hosting, and Ory Network offers the same APIs as a managed service.
Key Capabilities:
Ory Kratos for user management, login, and account recovery flows
Ory Hydra as a certified OAuth 2.0 and OpenID Connect provider
Ory Keto for fine-grained, relationship-based permissions
Ory Oathkeeper as an identity-aware access proxy
Self-hosting under Apache 2.0 with full control of identity data
Ory Network for the same stack as a managed cloud service
Alternative tools
- Better Auth
Framework-agnostic authentication library for TypeScript
- Stytch
Authentication API for passwordless and B2B identity
- WorkOS
Enterprise-ready authentication and SSO for SaaS apps
- SuperTokens
Open-source authentication you can self-host and own
- Keycloak
Self-hosted identity and access management server
- Clerk
Drop-in authentication and user management for modern stacks