The Wayback Machine - https://web.archive.org/web/20220612221730/https://github.com/ory
Skip to content
@ory

Ory

Open Source Identity Platform For Everyone

Ory - open source security infrastructure

Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and other emerging standards for cloud computing such as the GO programming language.

Ory Cloud

Ory Cloud is the easiest way to get started with Ory Software! It is free for developers, and there is no credit card required!

Ory Cloud has easy to understand, simple examples, administrative user interfaces, hosted pages, e.g. for login or registration, support for custom domains, collaborative features for your colleagues, and much more!

📣 Community gets Ory Cloud for Free! 📣

Ory community members get the Ory Cloud Start Up Plan free for half a year, with some convenient features, such as custom domains, and assigning your team members access. Sign up with your GitHub account and use the coupon code FIRST900 on the "Start-Up Plan" checkout page to claim a free project now! Make sure to be signed up to the Ory Community Slack when using the code!

Ory Software

  • Ory Kratos is a fully customizable, API-only platform for login, two-factor authentication, social sign in, passwordless flows, registration, account recovery, email / phone verification, secure credentials, identity and user management.
  • Ory Hydra is an API-only, "headless," OAuth 2.0 and OpenID Connect provider that can interface with any identity and user management system, such as Ory Kratos, Firebase, your PHP app, LDAP, SAML, and others.
  • Ory Oathkeeper is a zero trust networking proxy and sidecar for popular Ingress services and API gateways. It checks if incoming network request are authenticated, and allowed to perform the requested action.
  • Ory Keto is the world's first and leading open source implementation of Google's Zanzibar research paper, an infinitely scalable and blazing fast authorization and permissioning service - RBAC on globally distributed steroids.

Get Started

Getting started with Ory is easy. Yet, there are so many things to learn and explore! We recommend to choose a focus area first to get started:

  • Do you need to add login and registration forms to your app or website? Choose Ory Kratos!
  • Do you need advanced delegation and machine to machine authentication? Are you looking to become the next Social Sign In system supporting OpenID Connect and OAuth2? Choose Ory Hydra!
  • Do you need a fast and high performance system to solve roles, permissions, access control lists, RBAC? Choose Ory Keto!
  • Do you need to secure your services and APIs to protect against malicious actors in either the internet or your infrastructure, or both? Choose Ory Oathkeeper!

We're Hiring

We are looking for talented, creative people to build the future of Ory with our tremendous open source community! Check out our open positions if you're interested! If you are a contributor, and have a deep desire to code, document, or just build with Ory, let us know. Ory is growing.

Further Reading

Just stopping by? Check out one of our blog posts and learn how to use Ory in different contexts!

Pinned

  1. cloud Public

    Ory is the next-gen auth* SaaS - global, data-driven, affordable, and backed by popular and proven open source.

    47 6

  2. kratos Public

    Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, profile management, identity schemas, social sign in, registration, account recovery, passwordle…

    Go 6.7k 582

  3. hydra Public

    OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Securi…

    Go 12.7k 1.2k

  4. keto Public

    Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and…

    Go 3.3k 229

  5. oathkeeper Public

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust whi…

    Go 2.6k 275

  6. dockertest Public

    Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

    Go 2.6k 188

Repositories