Permify
Open-source authorization service for fine-grained access
Permify is an open-source authorization service inspired by Google Zanzibar for building and managing fine-grained, scalable access control. It is self-hosted to centralize permission checks.
Key features
- Zanzibar-style model
- Centralized permissions
- Real-time consistency
- gRPC and REST APIs
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Kubernetes-ready with Helm charts available
- Mature project with 6k GitHub stars
Is Permify secure?
OSV.dev has no published security advisories for Permify's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
Source: OSV.dev, checked 2026-10-14. How this is measured.
Permify replaces
Health badge
Maintain Permify? Add its health score to your README. The badge links back to this page.
Compare Permify
6 head-to-head comparisons.
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth