SHSelfHostIndex
OP

Open Policy Agent

General-purpose policy engine for cloud-native stacks

Identity & SSO ★ 12.4k stars Medium setup Apache-2.0

Open Policy Agent (OPA) is an open-source, CNCF graduated policy engine that decouples policy decisions from applications. It is self-hosted to enforce authorization and admission control across systems.

Official siteSource code

Key features

  • Declarative Rego policies
  • Decoupled decision making
  • Kubernetes admission control
  • REST decision API

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Mature project with 12.4k GitHub stars

Is Open Policy Agent secure?

No known vulnerabilities affect Open Policy Agent's latest release (v1.21.2). OSV.dev lists 6 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2025-46569, published 2025-05-01 (531 days ago), fixed in 1.4.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

Open Policy Agent replaces

Self-hosted AWS IAM policies alternatives

Health badge

Maintain Open Policy Agent? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 95 · excellent

Markdown
[![SelfHostIndex health score for Open Policy Agent](https://selfhostindex.com/badge/open-policy-agent.svg)](https://selfhostindex.com/app/open-policy-agent/)
HTML
<a href="https://selfhostindex.com/app/open-policy-agent/"><img src="https://selfhostindex.com/badge/open-policy-agent.svg" alt="SelfHostIndex health score for Open Policy Agent"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/open-policy-agent.svg
   :alt: SelfHostIndex health score for Open Policy Agent
   :target: https://selfhostindex.com/app/open-policy-agent/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar identity & sso apps