Ory is the largest open source community in the world for application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and many, many more.
- Ory Kratos is a fully customizable, API-only platform for login, two-factor authentication, social sign in, passwordless flows, registration, account recovery, email / phone verification, identity and user management.
- Ory Hydra is an API-only OAuth 2.0 and OpenID Connect provider that can interface with any identity and user management system (e.g. Ory Kratos, Firebase, your PHP app, LDAP, SAML ...).
- Ory Oathkeeper is a zero trust networking proxy and sidecar for popular ingress services and API gateways. It checks if incoming network request are authenticated and allowed to perform the requested action.
- Ory Keto is the world's first implementation of Google's Zanzibar research paper, an infinitely scalable and blazing fast authorization and permission service. Think RBAC on globally distributed steroids.
The best place to run Ory software is in Ory Cloud. With Ory Cloud, you do not need to worry about getting things to work in Docker, Kubernetes, scalability, latency, applying security patches in time, or legal risk. Ory Cloud also offers user and administrative interfaces, helping your non-developer colleagues to also administrate users, permissions, OAuth2, and more!
> Try Ory Cloud now, for free - no credit card required! <
Get Started
Getting started with Ory can feel overwhelming at times. There are so many things to learn and explore! We recommend to choose a focus area first to get started:
- Do you need to add login and registration forms to your app or website? Choose Ory Kratos!
- Do you need advanced delegation and machine to machine authentication? Are you looking to become the next Social Sign In system supporting OpenID Connect and OAuth2? Choose Ory Hydra!
- Do you need a fast and performant system to solve roles, permissions, access control lists, RBAC? Choose Ory Keto!
- Do you need to secure your services and APIs to protect against malicious actors both on the internet as well as in your infrastructure? Choose Ory Oathkeeper!
We're Hiring
We are looking for talented, creative people to build the future of Ory with our tremendous open source community! Check out our open positions if you're interested!
Further Reading
Just stopping by? Check out one of our blog posts and learn how to use Ory in different contexts!
