ory

ORY is a suite of open-source identity and access management (IAM) software and the company behind it. The ORY ecosystem provides modular components designed to secure modern applications and APIs through authentication, authorization, user management, and policy enforcement. All projects are published under permissive licenses and are available as open source, with commercial support offered by the company.

Core components include ORY Hydra, an OAuth 2.0 and OpenID Connect server used to issue and validate tokens; ORY Kratos, a identity and user management system handling registration, login, profile management, and account recovery; ORY Oathkeeper, a reverse proxy that enforces access control policies for upstream services; and ORY Keto, a policy decision API for fine-grained authorization based on RBAC or ABAC models.

ORY emphasizes a cloud-native, API-first approach. The projects are written in Go, designed to run in containers and Kubernetes environments, and are built to integrate with external identity providers. They support standard protocols such as OAuth 2.0 and OpenID Connect and provide policy definition and enforcement mechanisms for complex access control.

Adoption and ecosystem: ORY components are used to secure APIs and applications across various industries, from startups to large organizations, particularly where scalable identity and access management is required. The project maintains extensive documentation, a growing developer community, and options for enterprise support or hosted deployments.