Ory’s Open Source tools provide modern, fully customisable Identity and Access Management solutions. They are supported by a large community of developers improving them with every pull-request.
Fully flexible, fully yours
Ory offers reliable APIs and services for authentication, authorization, access control, and delegation.
OAuth 2.0 and OpenID Certified® OpenID Connect server — Cloud native, security-first, headless API security for your infrastructure. 
Cloud native user management system — Provision IDs, store user information, configure authentication methods and use a headless API. 
SAML to OpenID Connect bridge and Directory Sync — API integration for Enterprise SSO and user lifecycle management based on SAML, OIDC, and SCIM-based protocols. 
Identity and Access Proxy (IAP) — Authenticate, authorize and mutate any incoming traffic, using Zero Trust / BeyondCorp as open source. 
Authorization Server inspired by Google Zanzibar — Consistent, global Authorization System, providing granular access policies with RBAC, ABAC and ACL. 
Secure API Keys — Turn static API keys into short-lived capability tokens for non human identities. Using token derivation and Macaroon tokens, it enforces strict least-privilege guardrails.
Compare deployment options
Ory Open Source
Ory Enterprise License
Ory Network
Cross-platform benefits
Cross-platform benefits
Cross-platform benefits
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Ory Open Source: No
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Compliance-ready
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Ory Network: Yes
Global multi-region architecture
Ory Open Source: No
Global multi-region architecture
Multi-region capable
Global multi-region architecture
Ory Network: Yes
Purpose-based data retention
Ory Open Source: No
Purpose-based data retention
Ory Enterprise License: Yes
Purpose-based data retention
Ory Network: Yes
24/7 SLA support
Ory Open Source: No
24/7 SLA support
Ory Enterprise License: Yes
24/7 SLA support
Ory Network: Yes
CVE security patching
Ory Open Source: No
CVE security patching
Ory Enterprise License: Yes
CVE security patching
Ory Network: Yes
Unified control plane for ease of management
Ory Open Source: CLI
Unified control plane for ease of management
Ory Enterprise License: CLI / GUI
Unified control plane for ease of management
Ory Network: CLI / GUI / Terraform provider
Production Helm Charts
Ory Open Source: No
Production Helm Charts
Ory Enterprise License: Yes
Production Helm Charts
n/a
Managed infrastructure
Ory Open Source: No
Managed infrastructure
n/a
Managed infrastructure
Ory Network: Yes
Ory Kratos
Ory Kratos
Ory Kratos
High performance pooling
Ory Open Source: No
High performance pooling
Ory Enterprise License: Yes
High performance pooling
Ory Network: Yes
B2B Organizations
Ory Open Source: No
B2B Organizations
Ory Enterprise License: Yes
B2B Organizations
Ory Network: Yes
Admin onboarding portal
Ory Open Source: No
Admin onboarding portal
Ory Enterprise License: Yes
Admin onboarding portal
Ory Network: Yes
Social single sign-on
Ory Open Source: Yes
Social single sign-on
Ory Enterprise License: Yes
Social single sign-on
Ory Network: Yes
Purpose-based data retention
Ory Open Source: No
Purpose-based data retention
Ory Enterprise License: Yes
Purpose-based data retention
Ory Network: Yes
CAPTCHA
Ory Open Source: No
CAPTCHA
Ory Enterprise License: Yes
CAPTCHA
Ory Network: Yes
FedCM
Ory Open Source: No
FedCM
Ory Enterprise License: Yes
FedCM
Ory Network: Yes
Advanced identity search
Ory Open Source: No
Advanced identity search
Ory Enterprise License: Yes
Advanced identity search
Ory Network: Yes
Ory Hydra
Ory Hydra
Ory Hydra
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Open Source: Yes
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Enterprise License: Yes
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Network: Yes
OpenID Certified®
Ory Open Source: Yes
OpenID Certified®
Ory Enterprise License: Yes
OpenID Certified®
Ory Network: Yes
High performance pooling
Ory Open Source: No
High performance pooling
Ory Enterprise License: Yes
High performance pooling
Ory Network: Yes
Stateless JWT access tokens
Ory Open Source: No
Stateless JWT access tokens
Ory Enterprise License: Yes
Stateless JWT access tokens
Ory Network: Yes
Credential rotation
Ory Open Source: No
Credential rotation
Ory Enterprise License: Yes
Credential rotation
Ory Network: Yes
Token exchange
Ory Open Source: No
Token exchange
Ory Enterprise License: Yes
Token exchange
Ory Network: Yes
Resource Owner Password Credentials (ROPC)
Ory Open Source: No
Resource Owner Password Credentials (ROPC)
Ory Enterprise License: Yes
Resource Owner Password Credentials (ROPC)
Ory Network: Yes
Ory Polis
Ory Polis
Ory Polis
Custom Branding for Onboarding Portal
Ory Open Source: No
Custom Branding for Onboarding Portal
Ory Enterprise License: Yes
Custom Branding for Onboarding Portal
Ory Network: Yes
SAML & OIDC
Ory Open Source: No
SAML & OIDC
Ory Enterprise License: Yes
SAML & OIDC
Ory Network: Yes
Directory sync
Ory Open Source: No
Directory sync
Ory Enterprise License: Yes
Directory sync
Ory Network: Yes
Identity federation
Ory Open Source: No
Identity federation
Ory Enterprise License: Yes
Identity federation
Ory Network: Yes
Ory Keto
Ory Keto
Ory Keto
Concierge Onboarding
Ory Open Source: No
Concierge Onboarding
Ory Enterprise License: Yes
Concierge Onboarding
Ory Network: Yes
Optimized Permission Checks
Ory Open Source: No
Optimized Permission Checks
Ory Enterprise License: Yes
Optimized Permission Checks
Ory Network: Yes
OPA & RAG Integration
Ory Open Source: No
OPA & RAG Integration
Ory Enterprise License: Yes
OPA & RAG Integration
Ory Network: Yes
We operate around the clock to make sure your IAM runs the way you need it to — our stats speak for themselves
2.5BIdentities managed
685.0MTotal Docker image pulls
48.0KGitHub stars overall
GlobalOperating in 3 continents
OpenAI wanted a partner that could help enable our vision for owning our identity processes, data, and success. We have a lot of partners, and Ory is one of our best.
Frequently asked questions
Ory is an open source identity and access management platform built for developers who need modern authentication, authorization, and user management. It implements open standards like OAuth2, OpenID Connect, WebAuthn, and follows security best practices for zero trust and least privilege access.Ory’s modular architecture (Kratos, Hydra, Keto, Polis, and Oathkeeper) allows you to integrate it into your existing systems and deploy it anywhere from Kubernetes to cloud-native environments.
You can use Ory in three main ways:
- Ory Open Source: Run and manage the open source Ory components yourself with community support.
- Ory Enterprise License (OEL): Self-host Ory with 24×7 support and enterprise-grade features for performance, security, compliance, and SSO (B2B, SAML).Ory Network: Use Ory as a fully managed SaaS with advanced, enterprise features. You get the same APIs, with automated scaling, high availability, and global reach.
Choose the Ory Enterprise License (OEL) when you need to:
- Self-host for compliance, sovereignty, or private cloud requirements.
- Maintain full control of data and infrastructure while benefiting from Ory’s enterprise-grade support and enterprise-only features.
- OEL images include connection pooling with advanced configuration options for mission-critical workloads.
- Rely on SLAs and dedicated support for production stability.
- Gain legal and security assurances under a commercial agreement.
Use Ory Network when you prefer to focus on product development instead of managing infrastructure.The Ory Network provides:
- Fully managed identity infrastructure, operated by the Ory team.
- Global scaling, high availability, and low latency out of the box with no cluster setup or maintenance required.
- Zero-downtime updates, automatic backups, and continuous security patching.
- Multi-region edge distribution with five regional points of presence and the ability to deploy anywhere GCP provides service.
Yes. Ory’s core services: Hydra, Kratos, Polis, Keto, and Oathkeeper remain open source under the permissive Apache-2 license.Both Ory Enterprise License (OEL) and Ory Network build on this open foundation, extending it with higher-performance, production-grade features:
- Advanced scalability and performance tuning for large-scale deployments.
- High availability and failover capabilities for mission-critical workloads.
- Enterprise-only extensions such as compliance tooling, dedicated support, and integrations.
- Commercial editions receive faster feature delivery including security updates, new features, and patches before community versions.
Yes. Ory is API-compatible across all editions. You can start with the open source stack and later:
- Move to Ory Enterprise License to keep self-hosting with enterprise support.
- Migrate to Ory Network to offload infrastructure management entirely.
Operating Ory yourself involves:
- Managing infrastructure (Kubernetes, databases, networking).
- Handling updates, patches, and version compatibility.
- Ensuring observability, monitoring, and incident response.
- Maintaining uptime, scaling, and data recovery procedures.
Security and privacy are core to Ory’s design.
- All Ory components use secure defaults, encryption in transit and at rest, and defense-in-depth principles.
- Ory Enterprise License adds extended audit logging, compliance integrations, and private release channels.
Ory differs fundamentally because it's open source, built on open standards, and architected cloud-native from the ground up and not bolted on as an afterthought. It's built with modern languages and frameworks like Go and React, unlike legacy solutions limited by outdated scripting languages and infrastructure. You can deploy it anywhere, inspect the code, and integrate it deeply into your architecture. The modular design means you choose which components you need and build your own custom user interfaces rather than being forced into rigid, pre-built templates.
The right option depends on your organization’s goals and how much control you want over your infrastructure.If you need to maintain full control, meet strict compliance requirements, or operate at massive scale, Ory Enterprise License (OEL) is the best fit.For teams that want zero infrastructure management and seamless scaling, Ory Network provides a fully managed platform.And if you’re exploring, testing, or building prototypes, start with Ory Open Source or the Ory Network free tier.All Ory products share the same open standards and APIs, so you can move between them without rewriting your code.
Ory Open Source ecosystem
Tools & Libraries
Ory Dockertest
Dockertest helps you boot up docker images for your Go tests with minimal work.
Tools & Libraries
Ory Fosite
Extensible OAuth 2.0 and OpenID Connect SDK for Go. Ory Hydra is based on this.
Tools & Libraries
Ory SDKs
SDKs for all popular programming languages, generated using openapi-generator.
Tools & Libraries
Ory Kubernetes Helm Charts
For a list of Helm charts and their configuration options please visit k8s.ory.sh.
Frontend
Ory Hydra TypeScript/ExpressJS User & Consent Provider
Implementation for the Ory Hydra User Login and Consent interface written in TypeScript and ExpressJS.
Frontend
Ory Kratos NextJS/React Single Page Application Example
Add login, registration, account recovery (password reset), account verification (email verification), social sign-in, multi-factor authentication to your NextJS/React App.
Frontend
Ory Kratos React Native User Interfaces
A React Native reference implementation of an app using Ory Kratos for login, sign up, profile settings, MFA/2FA, account recovery, and more.
Frontend
Ory Kratos NodeJS/ExpressJS User Interfaces
A reference implementation for Ory Kratos in NodeJS/ExpressJS/Handlebars/NextJS. It implements all Ory Kratos flows.
Frontend
Ory Kratos React/NextJS User Interfaces
This repository contains a reference implementation for Ory Kratos' in ReactJS / NextJS. It implements all Ory Kratos flows (login, registration, account settings, account recovery, account verification).
Tools & Libraries
Ory Herodot
A lightweight Go library for writing responses and errors to HTTP, serves millions of requests daily through Ory Hydra.
Tools & Libraries
Ory Graceful
Best practice HTTP server configurations and helpers for Go 1.8's HTTP graceful shutdown feature.
Tools & Libraries
Ory Ladon
An SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies.
Tools & Libraries
Ory Go-Acc
A tool for reporting accurate Code Coverage in Golang. Cross platform (OsX, Windows, Linux).
Tools & Libraries
Ory CI
Automation tooling and robots for Ory's Continous Integration/Delivery pipelines.
Tools & Libraries
Ory X
Shared libraries used in the Ory ecosystem. Use at your own risk. Written in Go.
Tools & Libraries
Ory Encrypt-Dir
A very simple CLI helper that encrypts files in directories using AES-GCM (128bit).
Tools & Libraries
Ory Prettier Styles
The prettier config used by all Ory projects, on opinionated code styling focused on readability and clarity.
Tools & Libraries
Ory Redux Saga Fetch
A simple wrapper that reduces boilerplate code when using redux-saga in combination with async backend calls.
GitHub Action
Closed Reference Notifier
A GitHub action to open an issue when GitHub references in your code are closed.
GitHub Action
Build Buf Action
A GitHub action for working with protocol buffers, to build and lint protobuf using buildbuf.
GitHub Action
Milestone Action
Generates a markdown document based on milestones, issues, pull requests, and labels.
GitHub Action
Label Sync
A GitHub action that synchronizes issue labels across GitHub repositories.
GitHub Action
Ory Actions
Scripts for automating regular Ory CI tasks: Generating SDKs and changelogs as well as releasing new versions.
Deploy Ory on your preferred infrastructure
Deploy on any infrastructure and take full control over authentication and user workflows of your application.
page.tsx
import React, { useEffect, useState } from "react"
import { FrontendApi, Configuration, Session } from "@ory/client"
const basePath = "https://ory.example.com"
const ory = new FrontendApi(
new Configuration({
basePath,
baseOptions: { withCredentials: true },
}),
)
function Example() {
const [session, setSession] = useState<Session | undefined>()
useEffect(() => {
ory
.toSession()
.then(({ data }) => {
setSession(data)
})
.catch((err) => {
console.error(err)
// Not signed in, redirect to login
window.location.replace(`${basePath}/self-service/login/browser`)
})
}, [])
if (!session) {
return <p>No session found.</p>
}
return <p>Welcome to, {session?.identity.traits.email}.</p>
}
