SHSelfHostIndex

OpenFGA

High-performance fine-grained authorization engine

Identity & SSO ★ 6k stars Medium setup Apache-2.0

OpenFGA is an open-source, CNCF authorization engine inspired by Google Zanzibar for relationship-based access control. It can be self-hosted to centralize fine-grained permission decisions for applications.

Official siteSource code

Key features

  • Relationship-based access
  • High-throughput checks
  • Modeling language
  • gRPC and HTTP APIs

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Mature project with 6k GitHub stars

Is OpenFGA secure?

No known vulnerabilities affect OpenFGA's latest release (v1.22.0). OSV.dev lists 15 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-61709, published 2026-09-16 (28 days ago), fixed in 1.18.1

Source: OSV.dev, checked 2026-10-14. How this is measured.

OpenFGA replaces

Self-hosted Auth0 FGA alternatives

Health badge

Maintain OpenFGA? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 92 · excellent

Markdown
[![SelfHostIndex health score for OpenFGA](https://selfhostindex.com/badge/openfga.svg)](https://selfhostindex.com/app/openfga/)
HTML
<a href="https://selfhostindex.com/app/openfga/"><img src="https://selfhostindex.com/badge/openfga.svg" alt="SelfHostIndex health score for OpenFGA"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/openfga.svg
   :alt: SelfHostIndex health score for OpenFGA
   :target: https://selfhostindex.com/app/openfga/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare OpenFGA

6 head-to-head comparisons.

Similar identity & sso apps