Ory Keto
Permission and authorization server based on Zanzibar
Ory Keto is an open-source permission server inspired by Google's Zanzibar paper. It answers fine-grained authorization questions and is self-hosted to manage access control for applications.
Key features
- Zanzibar-style permissions
- Relationship-based access
- gRPC and REST APIs
- Fast checks
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Kubernetes-ready with Helm charts available
- Mature project with 5.4k GitHub stars
Ory Keto replaces
Compare Ory Keto
27 head-to-head comparisons.
- Ory Keto vs Keycloak
- Ory Keto vs Casbin
- Ory Keto vs Ory Hydra
- Ory Keto vs SuperTokens
- Ory Keto vs ZITADEL
- Ory Keto vs Logto
- Ory Keto vs Casdoor
- Ory Keto vs Ory Kratos
- Ory Keto vs Open Policy Agent
- Ory Keto vs Apereo CAS
- Ory Keto vs Dex
- Ory Keto vs Hanko
- Ory Keto vs Pocket ID
- Ory Keto vs step-ca
- Ory Keto vs SpiceDB
- Ory Keto vs LLDAP
- Ory Keto vs Permify
- Ory Keto vs OpenFGA
- Ory Keto vs Kanidm
- Ory Keto vs Cerbos
- Ory Keto vs 2FAuth
- Ory Keto vs Boundary
- Ory Keto vs node-oidc-provider
- Ory Keto vs Ory Oathkeeper
- Ory Keto vs Vouch Proxy
- Ory Keto vs Topaz
- Ory Keto vs Warrant
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth