The Continuous Security License is a budget friendly subscription that protects your open-source deployments against modern exploits with guaranteed, SLA-backed CVE patching delivered continuously rather than annually or bi-annually.
Why the Continuous Security License?
With AI agents accelerating CVE discovery, teams struggle to keep up. Offload patching to Ory, with guaranteed SLAs that keep your open-source deployments safe and productive.
Guaranteed CVE Resolution SLAs
Ory's new Continuous Security License provides ongoing CVE updates backed by specific service-level agreements based on issue severity.
Continuous Patch Delivery
Rather than waiting for the standard bi-annual open-source build cadence to receive security fixes, licensed organizations receive continuous security updates as patches are developed.
Mitigation Against LLM-Assisted Exploits
The continuous patching model directly reduces the vulnerability exposure window, protecting production infrastructure against the rapid emergence and acceleration of LLM-assisted cyber exploits.
Frequently Asked Questions
It is a paid subscription model providing continuous, SLA-backed CVE patching and security updates for self-hosted open-source Ory deployments, bridging the gap between community bi-annual releases and full enterprise tiers.
The CSL is attractively priced per Ory component. Please contact us for specific pricing.
To improve security and stability, Ory now releases open-source builds every six months, delivering CVE patches and feature updates. CSL subscribers receive patches continuously under contractually committed resolution timelines measured in days.
CSL focuses specifically on accelerated, SLA-driven vulnerability fixes and builds.OEL typically includes 24×7 technical support, architectural guidance, zero-downtime upgrades, and advanced enterprise features.
Ory's new Continuous Security License provides ongoing CVE updates backed by specific service-level agreements based on issue severity. We average 3x faster times than our SLAs commit.
Because pricing is per component, running both Ory Kratos and Ory Hydra in production would require separate CSL subscriptions. Contact us for specifics.
You can use the CSL in whatever environment you want. There are restriction for production use, but no restrictions or additional costs for other non-production environments.
Compare deployment options
Ory Open Source
Continuous Security License
Ory Enterprise License
Ory Network
Cross-platform benefits
Cross-platform benefits
Cross-platform benefits
Cross-platform benefits
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Ory Open Source: No
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Continuous Security License: No
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Compliance-ready
Compliance and audit-ready (GDPR, PSD2, PCI-DSS, SOC 2, and others)
Ory Network: Yes
Global multi-region architecture
Ory Open Source: No
Global multi-region architecture
Continuous Security License: No
Global multi-region architecture
Multi-region capable
Global multi-region architecture
Ory Network: Yes
Purpose-based data retention
Ory Open Source: No
Purpose-based data retention
Continuous Security License: No
Purpose-based data retention
Ory Enterprise License: Yes
Purpose-based data retention
Ory Network: Yes
24/7 SLA support
Ory Open Source: No
24/7 SLA support
Continuous Security License: No
24/7 SLA support
Ory Enterprise License: Yes
24/7 SLA support
Ory Network: Yes
CVE security patching
Ory Open Source: No
CVE security patching
Continuous Security License: Yes
CVE security patching
Ory Enterprise License: Yes
CVE security patching
Ory Network: Yes
Unified control plane for ease of management
Ory Open Source: CLI
Unified control plane for ease of management
Continuous Security License: CLI
Unified control plane for ease of management
Ory Enterprise License: CLI / GUI
Unified control plane for ease of management
Ory Network: CLI / GUI / Terraform provider
Software Bill of Materials
Ory Open Source: Yes
Software Bill of Materials
Continuous Security License: Yes
Software Bill of Materials
Ory Enterprise License: Yes
Software Bill of Materials
Ory Network: Yes
Cryptographic Bill of Materials (CBOM) & Artificial Intelligence Bill of Materials (AIBOM)
Ory Open Source: No
Cryptographic Bill of Materials (CBOM) & Artificial Intelligence Bill of Materials (AIBOM)
Continuous Security License: Yes
Cryptographic Bill of Materials (CBOM) & Artificial Intelligence Bill of Materials (AIBOM)
Ory Enterprise License: Yes
Cryptographic Bill of Materials (CBOM) & Artificial Intelligence Bill of Materials (AIBOM)
Ory Network: Yes
Production Helm Charts
Ory Open Source: No
Production Helm Charts
Continuous Security License: No
Production Helm Charts
Ory Enterprise License: Yes
Production Helm Charts
n/a
Managed infrastructure
Ory Open Source: No
Managed infrastructure
Continuous Security License: No
Managed infrastructure
n/a
Managed infrastructure
Ory Network: Yes
Support Ticketing System
Ory Open Source: No
Support Ticketing System
Continuous Security License: No
Support Ticketing System
Ory Enterprise License: Yes
Support Ticketing System
Ory Network: Yes
Concierge onboarding
Ory Open Source: No
Concierge onboarding
Continuous Security License: No
Concierge onboarding
Ory Enterprise License: Yes
Concierge onboarding
Ory Network: Yes
Dedicated slack channel
Ory Open Source: No
Dedicated slack channel
Continuous Security License: No
Dedicated slack channel
Ory Enterprise License: Yes
Dedicated slack channel
Ory Network: Yes
Premium Features
Ory Open Source: No
Premium Features
Continuous Security License: No
Premium Features
Ory Enterprise License: Yes
Premium Features
Ory Network: Yes
Managing Identities - Ory Kratos
Managing Identities - Ory Kratos
Managing Identities - Ory Kratos
Managing Identities - Ory Kratos
High performance pooling
Ory Open Source: No
High performance pooling
Continuous Security License: No
High performance pooling
Ory Enterprise License: Yes
High performance pooling
Ory Network: Yes
B2B Organizations
Ory Open Source: No
B2B Organizations
Continuous Security License: No
B2B Organizations
Ory Enterprise License: Yes
B2B Organizations
Ory Network: Yes
Admin onboarding portal
Ory Open Source: No
Admin onboarding portal
Continuous Security License: No
Admin onboarding portal
Ory Enterprise License: Yes
Admin onboarding portal
Ory Network: Yes
Social single sign-on
Ory Open Source: Yes
Social single sign-on
Continuous Security License: Yes
Social single sign-on
Ory Enterprise License: Yes
Social single sign-on
Ory Network: Yes
Purpose-based data retention
Ory Open Source: No
Purpose-based data retention
Continuous Security License: No
Purpose-based data retention
Ory Enterprise License: Yes
Purpose-based data retention
Ory Network: Yes
CAPTCHA
Ory Open Source: No
CAPTCHA
Continuous Security License: No
CAPTCHA
Ory Enterprise License: Yes
CAPTCHA
Ory Network: Yes
FedCM
Ory Open Source: No
FedCM
Continuous Security License: No
FedCM
Ory Enterprise License: Yes
FedCM
Ory Network: Yes
Advanced identity search
Ory Open Source: No
Advanced identity search
Continuous Security License: No
Advanced identity search
Ory Enterprise License: Yes
Advanced identity search
Ory Network: Yes
Authorization (Certified OAuth2/OIDC) - Ory Hydra
Authorization (Certified OAuth2/OIDC) - Ory Hydra
Authorization (Certified OAuth2/OIDC) - Ory Hydra
Authorization (Certified OAuth2/OIDC) - Ory Hydra
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Open Source: Yes
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Continuous Security License: Yes
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Enterprise License: Yes
OAuth 2.0 + OpenID Connect with OAuth 2.1 support*
Ory Network: Yes
OpenID Certified®
Ory Open Source: Yes
OpenID Certified®
Continuous Security License: Yes
OpenID Certified®
Ory Enterprise License: Yes
OpenID Certified®
Ory Network: Yes
High performance pooling
Ory Open Source: No
High performance pooling
Continuous Security License: No
High performance pooling
Ory Enterprise License: Yes
High performance pooling
Ory Network: Yes
Stateless JWT access tokens
Ory Open Source: No
Stateless JWT access tokens
Continuous Security License: No
Stateless JWT access tokens
Ory Enterprise License: Yes
Stateless JWT access tokens
Ory Network: Yes
Credential rotation
Ory Open Source: No
Credential rotation
Continuous Security License: No
Credential rotation
Ory Enterprise License: Yes
Credential rotation
Ory Network: Yes
Token exchange
Ory Open Source: No
Token exchange
Continuous Security License: No
Token exchange
Ory Enterprise License: Yes
Token exchange
Ory Network: Yes
Resource Owner Password Credentials (ROPC)
Ory Open Source: No
Resource Owner Password Credentials (ROPC)
Continuous Security License: No
Resource Owner Password Credentials (ROPC)
Ory Enterprise License: Yes
Resource Owner Password Credentials (ROPC)
Ory Network: Yes
B2B Federation - Ory Polis
B2B Federation - Ory Polis
B2B Federation - Ory Polis
B2B Federation - Ory Polis
Custom Branding for Onboarding Portal
Ory Open Source: No
Custom Branding for Onboarding Portal
Continuous Security License: No
Custom Branding for Onboarding Portal
Ory Enterprise License: Yes
Custom Branding for Onboarding Portal
Ory Network: Yes
SAML & OIDC
Ory Open Source: No
SAML & OIDC
Continuous Security License: No
SAML & OIDC
Ory Enterprise License: Yes
SAML & OIDC
Ory Network: Yes
Directory sync
Ory Open Source: No
Directory sync
Continuous Security License: No
Directory sync
Ory Enterprise License: Yes
Directory sync
Ory Network: Yes
Identity federation
Ory Open Source: No
Identity federation
Continuous Security License: No
Identity federation
Ory Enterprise License: Yes
Identity federation
Ory Network: Yes
Permissions - Ory Keto
Permissions - Ory Keto
Permissions - Ory Keto
Permissions - Ory Keto
Concierge Onboarding
Ory Open Source: No
Concierge Onboarding
Continuous Security License: No
Concierge Onboarding
Ory Enterprise License: Yes
Concierge Onboarding
Ory Network: Yes
Optimized Permission Checks
Ory Open Source: No
Optimized Permission Checks
Continuous Security License: No
Optimized Permission Checks
Ory Enterprise License: Yes
Optimized Permission Checks
Ory Network: Yes
OPA & RAG Integration
Ory Open Source: No
OPA & RAG Integration
Continuous Security License: No
OPA & RAG Integration
Ory Enterprise License: Yes
OPA & RAG Integration
Ory Network: Yes
We needed Ory enterprise level support and wanted expert help, faster access to new features and enhancements, and resolutions and SLAs to common vulnerabilities and exposures (CVEs)."
