SHSelfHostIndex
OR

Ory Oathkeeper

Identity and access proxy for zero-trust networks

Identity & SSO ★ 3.6k stars Medium setup Apache-2.0

Ory Oathkeeper is an open-source identity and access proxy that authenticates and authorizes incoming HTTP requests against access rules. It works with self-hosted identity providers to enforce policies.

Official siteSource code

Key features

  • Request authentication proxy
  • Rule-based access control
  • Pluggable authenticators
  • Zero-trust ready

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Active community (3.6k GitHub stars)

Is Ory Oathkeeper secure?

No known vulnerabilities affect Ory Oathkeeper's latest release (v26.2.0). OSV.dev lists 4 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-33494, published 2026-03-26 (202 days ago), fixed in 26.2.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

Ory Oathkeeper replaces

Self-hosted Cloudflare Access alternatives

Health badge

Maintain Ory Oathkeeper? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 84 · excellent

Markdown
[![SelfHostIndex health score for Ory Oathkeeper](https://selfhostindex.com/badge/ory-oathkeeper.svg)](https://selfhostindex.com/app/ory-oathkeeper/)
HTML
<a href="https://selfhostindex.com/app/ory-oathkeeper/"><img src="https://selfhostindex.com/badge/ory-oathkeeper.svg" alt="SelfHostIndex health score for Ory Oathkeeper"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/ory-oathkeeper.svg
   :alt: SelfHostIndex health score for Ory Oathkeeper
   :target: https://selfhostindex.com/app/ory-oathkeeper/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Ory Oathkeeper

3 head-to-head comparisons.

Similar identity & sso apps