Skip to content
@ory

Ory

Open Source Identity Platform For Everyone

Ory - open source security infrastructure

Ory is the world's largest open-source community for cloud software application security. We maintain advanced open-source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Network

The Ory Network is the fastest, most secure, and worry-free way to use Ory's Services. It provides the infrastructure for modern end-to-end security:

  • Identity & credential management scaling to billions of users and devices
  • Registration, login, and account management flows for passkeys, biometric authentication, social sign-in, SSO, and multi-factor authentication
  • Pre-built login, registration, and account management pages and components
  • OAuth2 and OpenID Connect provider for single sign-on, API access, and machine-to-machine authorization
  • Low-latency permission checks based on Google's Zanzibar model and with built-in support for the Ory Permission Language

It's fully managed, highly available, developer & compliance-friendly!

  • GDPR-friendly secure storage with data locality
  • Cloud-native APIs, compatible with Ory's open-source servers
  • Comprehensive admin tools with the web-based Ory Console and the Ory Command Line Interface (CLI)
  • Extensive documentation, straightforward examples, and easy-to-follow guides
  • Fair, usage-based pricing

Sign up for a free developer account today!

Ory Services

  • Do you need to add login and registration forms to your app or website? Choose Ory Identities!
  • Do you need advanced delegation and machine to machine authentication? Are you looking to become the next Social Sign In system supporting OpenID Connect and OAuth2? Choose Ory OAuth2 & OpenID!
  • Do you need a fast and high performance system to solve roles, permissions, access control lists, RBAC? Choose Ory Permissions!
  • Do you need to secure your services and APIs to protect against malicious actors in either the internet or your infrastructure, or both? Choose Ory Oathkeeper!

Ory Open-Source Servers

  • Ory Kratos is a fully customizable, API-only platform for login, two-factor authentication, social sign-in, passwordless flows, registration, account recovery, email / phone verification, secure credentials, identity and user management.
  • Ory Hydra is an API-only, "headless," OAuth 2.0 and OpenID Connect provider that can interface with any identity and user management system, such as Ory Kratos, Firebase, your PHP app, LDAP, SAML, and others.
  • Ory Oathkeeper is a zero trust networking proxy and sidecar for popular ingress services and API gateways. It checks if incoming network request are authenticated and allowed to perform the requested action.
  • Ory Keto is the world's first and leading open-source implementation of Google's Zanzibar research paper, an infinitely scalable and blazing fast authorization and permissioning service - RBAC on globally distributed steroids.

We're Hiring

We are looking for talented, creative people to build the future of Ory with our tremendous open source community! Check out our open positions if you're interested! If you are a contributor, and have a deep desire to code, document, or just build with Ory, let us know. Ory is growing.

Further Reading

Just stopping by? Check out one of our blog posts and learn how to use Ory in different contexts!

Pinned

  1. network network Public

    Ory runs a global end-to-end security infrastructure for humans, robots, and servers. We build and use open source software.

    77 6

  2. kratos kratos Public

    Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, …

    Go 10.6k 927

  3. hydra hydra Public

    OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Securi…

    Go 15.1k 1.4k

  4. keto keto Public

    Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and…

    Go 4.6k 335

  5. oathkeeper oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust whi…

    Go 3.2k 341

  6. dockertest dockertest Public

    Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

    Go 4k 236

Repositories

Showing 10 of 183 repositories
  • kratos Public

    Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!

    Go 10,574 Apache-2.0 928 180 (9 issues need help) 49 Updated Apr 27, 2024
  • sdk Public

    The place where ORY's SDKs are being auto-generated

    Java 133 Apache-2.0 82 51 (1 issue needs help) 5 Updated Apr 26, 2024
  • docs Public

    The Ory documentation

    TypeScript 127 Apache-2.0 342 25 (1 issue needs help) 18 Updated Apr 26, 2024
  • hydra Public

    OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.

    Go 15,088 Apache-2.0 1,449 81 (4 issues need help) 16 Updated Apr 26, 2024
  • k8s Public

    Kubernetes Helm Charts for the ORY ecosystem.

    Mustache 326 Apache-2.0 253 14 4 Updated Apr 25, 2024
  • ci Public

    Automation and robots for Ory's CI and CD pipelines

    Shell 7 Apache-2.0 6 2 0 Updated Apr 25, 2024
  • oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

    Go 3,168 Apache-2.0 341 53 (7 issues need help) 17 Updated Apr 24, 2024
  • keto Public

    Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

    Go 4,614 Apache-2.0 335 36 (3 issues need help) 22 Updated Apr 24, 2024
  • cli Public

    The Ory CLI.

    Go 39 Apache-2.0 20 20 (1 issue needs help) 14 Updated Apr 23, 2024
  • cli-vscode-extension Public

    This extension enables Visual Studio Code to use the Ory CLI to interact with your Ory projects and services.

    TypeScript 3 1 0 0 Updated Apr 22, 2024