SHSelfHostIndex
TO

Topaz

Open-source authorization with fine-grained access control

Identity & SSO ★ 1.4k stars Medium setup Apache-2.0

Topaz is an open-source authorization service that combines OPA policy evaluation with a relationship-based data model for fine-grained access control. It runs self-hosted as a sidecar or service.

Official siteSource code

Key features

  • Combines RBAC and ReBAC
  • OPA-based policies
  • Local decision engine
  • Sidecar deployment

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Active community (1.4k GitHub stars)
  • Written in Go

Is Topaz secure?

OSV.dev has no published security advisories for Topaz's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

Topaz replaces

Self-hosted Auth0 FGA alternatives

Health badge

Maintain Topaz? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 84 · excellent

Markdown
[![SelfHostIndex health score for Topaz](https://selfhostindex.com/badge/topaz-authz.svg)](https://selfhostindex.com/app/topaz-authz/)
HTML
<a href="https://selfhostindex.com/app/topaz-authz/"><img src="https://selfhostindex.com/badge/topaz-authz.svg" alt="SelfHostIndex health score for Topaz"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/topaz-authz.svg
   :alt: SelfHostIndex health score for Topaz
   :target: https://selfhostindex.com/app/topaz-authz/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Topaz

6 head-to-head comparisons.

Similar identity & sso apps