Ory is the world's largest open-source community for cloud software application security. We maintain advanced open-source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.
The Ory Network is the fastest, most secure, and worry-free way to use Ory's Services. It provides the infrastructure for modern end-to-end security:
- Identity & credential management scaling to billions of users and devices
- Registration, login, and account management flows for passkeys, biometric authentication, social sign-in, SSO, and multi-factor authentication
- Pre-built login, registration, and account management pages and components
- OAuth2 and OpenID Connect provider for single sign-on, API access, and machine-to-machine authorization
- Low-latency permission checks based on Google's Zanzibar model and with built-in support for the Ory Permission Language
It's fully managed, highly available, developer & compliance-friendly!
- GDPR-friendly secure storage with data locality
- Cloud-native APIs, compatible with Ory's open-source servers
- Comprehensive admin tools with the web-based Ory Console and the Ory Command Line Interface (CLI)
- Extensive documentation, straightforward examples, and easy-to-follow guides
- Fair, usage-based pricing
Sign up for a free developer account today!
- Do you need to add login and registration forms to your app or website? Choose Ory Identities!
- Do you need advanced delegation and machine to machine authentication? Are you looking to become the next Social Sign In system supporting OpenID Connect and OAuth2? Choose Ory OAuth2 & OpenID!
- Do you need a fast and high performance system to solve roles, permissions, access control lists, RBAC? Choose Ory Permissions!
- Do you need to secure your services and APIs to protect against malicious actors in either the internet or your infrastructure, or both? Choose Ory Oathkeeper!
Ory Open-Source Servers
- Ory Kratos is a fully customizable, API-only platform for login, two-factor authentication, social sign-in, passwordless flows, registration, account recovery, email / phone verification, secure credentials, identity and user management.
- Ory Hydra is an API-only, "headless," OAuth 2.0 and OpenID Connect provider that can interface with any identity and user management system, such as Ory Kratos, Firebase, your PHP app, LDAP, SAML, and others.
- Ory Oathkeeper is a zero trust networking proxy and sidecar for popular ingress services and API gateways. It checks if incoming network request are authenticated and allowed to perform the requested action.
- Ory Keto is the world's first and leading open-source implementation of Google's Zanzibar research paper, an infinitely scalable and blazing fast authorization and permissioning service - RBAC on globally distributed steroids.
We are looking for talented, creative people to build the future of Ory with our tremendous open source community! Check out our open positions if you're interested! If you are a contributor, and have a deep desire to code, document, or just build with Ory, let us know. Ory is growing.
Just stopping by? Check out one of our blog posts and learn how to use Ory in different contexts!