Skip to content
@ory

Ory

Web-scale, market-proven open source identity access and permission services

Ory - Open-source identity and access infrastructure

Ory: Open-source identity and access infrastructure for modern applications

Ory provides scalable, flexible, and secure identity and access management (IAM) solutions that empower developers to build innovative applications. Whether you handle billions of users or launch a startup, Ory makes security and compliance simple with open-source transparency and cutting-edge tools.

Why engineers choose Ory

  • API-first identity management: Ory offers a developer-friendly, headless approach to user authentication and management with seamless frontend and backend integration.
  • Modern access control: Add fine-grained permissions, relationship-based access control (RBAC/ABAC), and Zero Trust principles with Ory's high-performance tools.
  • Web-grade scalability: Built with cloud-native technologies, Ory scales effortlessly to support hundreds of millions of active users and devices for the largest websites in the world.
  • Best-in-class security: Meet stringent security standards with passwordless login, multi-factor authentication (MFA), and adherence to GDPR and other privacy regulations.
  • Modular architecture: Use what you need—identity, OAuth2, permissions—without overhauling your stack, and extend functionality with custom integrations.
  • Open-source transparency: Fully audit, customize, and contribute to Ory’s codebase for ultimate flexibility.
  • Developer tools and community: Access extensive documentation, SDKs, CLI tools, and join a vibrant community of engineers solving modern security challenges.

Got questions or need help choosing the right solution for your needs? The Ory team is here to help! Contact Ory today to speak to an expert.

Ory tools and services

Ory Network

Ory Network is a managed IAM service that provides:

  • Pre-built components: Ready-to-use login, registration, and account recovery flows.
  • Scalable infrastructure: Automatic scalability with low-latency APIs.
  • Advanced security: Threat prevention and privacy compliance such as GDPR.
  • Developer support: SDKs for popular languages and customizable ReactJS components.

Sign up for free and focus on building your application while Ory handles the complexity of IAM.

Ory self-hosted

For businesses looking to self-host

  • Ory Enterprise License: Unlock enterprise-grade features like security SLAs for CVEs, SAML, B2B organizations, multi-tenancy, and better scalability.

Contact Ory experts to learn more.

Trusted, verified, and hardened: Ory open-source

  • Ory Kratos: Advanced identity and user management, featuring passkeys, passwordless login, 2FA, and social sign-in.
  • Ory Hydra: OAuth 2.0 and OpenID Connect provider for secure API access and single sign-on.
  • Ory Keto: Relationship-based access control for scalable and fine-grained permissions management.
  • Ory Oathkeeper: A Zero Trust networking proxy for API authentication and authorization.
  • Ory Dockertest: Simplify integration testing with ephemeral Docker containers.

Developer resources

Join the Ory community

Ory is looking for developers, technical writers, and open-source contributors to make IAM for everyone.

Learn more

Secure your app with Ory’s open-source identity and access solutions. Build with confidence, innovate faster, and join a global community of engineers shaping the future of application security.

Pinned Loading

  1. network network Public

    Ory runs a global end-to-end security infrastructure for humans, robots, and servers. We build and use open source software.

    Shell 84 7

  2. kratos kratos Public

    Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OID…

    Go 11.6k 977

  3. hydra hydra Public

    The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headl…

    Go 15.9k 1.5k

  4. keto keto Public

    The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, …

    Go 4.9k 352

  5. oathkeeper oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust whi…

    Go 3.3k 361

  6. dockertest dockertest Public

    Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

    Go 4.3k 247

Repositories

Showing 10 of 171 repositories
  • fosite Public

    Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

    ory/fosite’s past year of commit activity
    Go 2,364 Apache-2.0 369 26 15 Updated Mar 13, 2025
  • hydra Public

    The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

    ory/hydra’s past year of commit activity
    Go 15,925 Apache-2.0 1,520 71 (2 issues need help) 21 Updated Mar 13, 2025
  • kratos Public

    Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

    ory/kratos’s past year of commit activity
    Go 11,598 Apache-2.0 977 151 (3 issues need help) 62 Updated Mar 13, 2025
  • keto Public

    The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

    ory/keto’s past year of commit activity
    Go 4,944 Apache-2.0 352 36 (3 issues need help) 26 Updated Mar 13, 2025
  • hydra-maester Public

    Kuberenetes CRD Controller for Ory Hydra. ⚠️ Maintained by the community, not an official Ory project!

    ory/hydra-maester’s past year of commit activity
    Go 35 Apache-2.0 40 7 (1 issue needs help) 4 Updated Mar 13, 2025
  • herodot Public

    A lightweight Go library for writing responses and errors to HTTP

    ory/herodot’s past year of commit activity
    Go 114 Apache-2.0 16 3 (1 issue needs help) 1 Updated Mar 13, 2025
  • x Public

    Libraries used in the Ory ecosystem

    ory/x’s past year of commit activity
    Go 90 Apache-2.0 110 8 (1 issue needs help) 7 Updated Mar 12, 2025
  • elements Public

    Ory Elements is a component library that makes building login, registration and account pages for Ory a breeze. Check out the components library on Chromatic https://www.chromatic.com/library?appId=63b58e306cfd32348fa48d50

    ory/elements’s past year of commit activity
    TypeScript 100 Apache-2.0 48 39 (2 issues need help) 9 Updated Mar 12, 2025
  • oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

    ory/oathkeeper’s past year of commit activity
    Go 3,319 Apache-2.0 361 59 (7 issues need help) 25 Updated Mar 12, 2025
  • sdk Public

    The place where ORY's SDKs are being auto-generated

    ory/sdk’s past year of commit activity
    PHP 153 Apache-2.0 88 41 7 Updated Mar 12, 2025