Ory Oathkeeper
Identity and access proxy for zero-trust networks
Ory Oathkeeper is an open-source identity and access proxy that authenticates and authorizes incoming HTTP requests against access rules. It works with self-hosted identity providers to enforce policies.
Key features
- Request authentication proxy
- Rule-based access control
- Pluggable authenticators
- Zero-trust ready
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Kubernetes-ready with Helm charts available
- Active community (3.6k GitHub stars)
Ory Oathkeeper replaces
Compare Ory Oathkeeper
33 head-to-head comparisons.
- Ory Oathkeeper vs Keycloak
- Ory Oathkeeper vs Authelia
- Ory Oathkeeper vs Casbin
- Ory Oathkeeper vs Ory Hydra
- Ory Oathkeeper vs SuperTokens
- Ory Oathkeeper vs OAuth2 Proxy
- Ory Oathkeeper vs ZITADEL
- Ory Oathkeeper vs Logto
- Ory Oathkeeper vs Casdoor
- Ory Oathkeeper vs Ory Kratos
- Ory Oathkeeper vs Open Policy Agent
- Ory Oathkeeper vs Apereo CAS
- Ory Oathkeeper vs Dex
- Ory Oathkeeper vs Hanko
- Ory Oathkeeper vs Pocket ID
- Ory Oathkeeper vs step-ca
- Ory Oathkeeper vs Tinyauth
- Ory Oathkeeper vs SpiceDB
- Ory Oathkeeper vs LLDAP
- Ory Oathkeeper vs Permify
- Ory Oathkeeper vs OpenFGA
- Ory Oathkeeper vs Ory Keto
- Ory Oathkeeper vs Kanidm
- Ory Oathkeeper vs Pomerium
- Ory Oathkeeper vs Cerbos
- Ory Oathkeeper vs OpenZiti
- Ory Oathkeeper vs 2FAuth
- Ory Oathkeeper vs Boundary
- Ory Oathkeeper vs node-oidc-provider
- Ory Oathkeeper vs Vouch Proxy
- Ory Oathkeeper vs Buzzfeed sso
- Ory Oathkeeper vs Traefik Forward Auth
- Ory Oathkeeper vs Caddy Security
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth