Ory
Open-source identity and access management platform
About Ory
Ory is a cloud-native identity and access management platform offering modular, open-source solutions for authentication, authorization, and user management with a headless architecture.
Pros & Cons
Pros
- Fully open-source and auditable
- Modular — adopt only what you need
- Headless design for full UI control
- Scales to hundreds of millions of users
- GDPR-compliant with MFA built in
Cons
- Immutable identity schemas
- Steeper learning curve than Auth0
- Smaller feature set than Keycloak
- Complex documentation
- Cloud pricing scales quickly
Key Features
Ory Kratos
Headless identity with MFA, social login, passwordless, passkeys.
Ory Hydra
Certified OAuth 2.0 and OpenID Connect provider.
Ory Keto
Google Zanzibar-style fine-grained authorization.
Ory Oathkeeper
Zero Trust identity and access proxy.
Ory Polis
Organization management and enterprise SSO.
Ory Actions
Webhook-based extensibility for auth flows.
Multi-Region
Global edge performance with horizontal scaling.
Pricing
- Self-hosted
- Community support
- Full source code
- 1,000 DAU included
- $30 per 1,000 additional DAU
- MFA
- Managed cloud
- 20,000 DAU
- 99.9% SLA
- Dedicated support
- Custom DAU pricing
- 99.99% uptime
- Multi-region
- Event streaming
Best For
SaaS Authentication
Secure login with social sign-in, MFA, passkeys.
API Access Control
OAuth 2.0 and Zero Trust proxy for microservices.
Enterprise Identity
On-premise SSO with fine-grained permissions.
High-Scale Consumer Apps
Millions of DAU with horizontal scaling.
Similar Tools
Tuta
Secure email with quantum-resistant encryption
Odoo
Modular open-source ERP for manufacturing & beyond
Google Fonts
Free, open-source web fonts for modern design and development
Auth0
Developer-friendly authentication and authorization platform for any application
Concrete CMS
The free, open source CMS for teams who need powerful content control
Continue
The open-source AI coding assistant for VS Code and JetBrains
Featured In
6 Best Open-Source Authentication Solutions for Modern Apps (2026)
Best for microservices architectures needing modular, API-first identity components — the most flexible approach for teams that want to compose their auth stack, not adopt a platform
6 Tools That Fix Broken Customer Password Reset Flows (2026)
Best for engineering teams building complex applications that need policy-driven account recovery with full open-source control
Best Identity Providers for Social Login Customization (2026)
Best for engineering teams who want total control over the OAuth flow and don't mind building the UI themselves.
Best Identity Providers With Enterprise SSO Support (2026)
Best for engineering teams that want composable, Go-native, microservice auth and need rich authorization alongside SSO.