SHSelfHostIndex
SP

SpiceDB

Open-source Zanzibar-inspired permissions database

Identity & SSO ★ 7.1k stars Hard setup Apache-2.0

SpiceDB is an open-source database system for managing security-critical application permissions inspired by Google Zanzibar. It is self-hosted to provide consistent, fine-grained authorization at scale.

Official siteSource code

Key features

  • Zanzibar-inspired model
  • Consistency guarantees
  • Schema language
  • Horizontal scaling

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Mature project with 7.1k GitHub stars

Is SpiceDB secure?

No known vulnerabilities affect SpiceDB's latest release (v1.56.2). OSV.dev lists 15 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-55866, published 2026-09-14 (30 days ago), fixed in 1.54.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

SpiceDB replaces

Self-hosted Auth0 FGA alternativesSelf-hosted OpenFGA alternatives

Health badge

Maintain SpiceDB? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 93 · excellent

Markdown
[![SelfHostIndex health score for SpiceDB](https://selfhostindex.com/badge/spicedb.svg)](https://selfhostindex.com/app/spicedb/)
HTML
<a href="https://selfhostindex.com/app/spicedb/"><img src="https://selfhostindex.com/badge/spicedb.svg" alt="SelfHostIndex health score for SpiceDB"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/spicedb.svg
   :alt: SelfHostIndex health score for SpiceDB
   :target: https://selfhostindex.com/app/spicedb/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare SpiceDB

6 head-to-head comparisons.

Similar identity & sso apps