Dev tools · alternatives · 2026
24 alternatives to Low-Code ABAC – Permissions even a monkey can use (on top of OPA)
Attribute-based access control with a policy UI and policy as code. User, resource, and environment attributes evaluated at decision time.
Permit.io is a low-code permissions management tool built on top of OPA (Open Policy Agent) that simplifies attribute-based access control implementation. It enables developers to define and manage complex… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Low-Code ABAC – Permissions even a monkey can use (on top of OPA) launched in 2022; newer entries below may have overtaken it.
- 1
Permit.io▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal
2023 · permit.io · its alternatives →
- 2
Fine-Grained Permissions for AI-Powered Applications
2025 · permit.io · its alternatives →
- 3
- 4
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 5OO
Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.
2020 · osohq.com · its alternatives →
- 6
Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…
Mar 2026 · permit.io · its alternatives →
- 7
Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
2024 · github.com · its alternatives →
- 8
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go. - ory/oathkeeper
2018 · github.com · its alternatives →
- 9
Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
2022 · github.com · its alternatives →
- 10
Context Gateway▲220We built an open-source proxy that sits between coding agents (Claude Code, OpenClaw, etc.) and the LLM, compressing tool outputs before they enter the context window. Demo: https://www.youtube.com/watch?v=-vFZ6MPrwjw#t=9s. Motivation: Agents are terrible at managing context. A single file read or grep can dump thousands of tokens into the window, most of it noise. This isn't just expensive — it actively degrades quality. Long-context benchmarks consistently show steep accuracy drops as context grows (OpenAI's GPT-5.4 eval goes from 97.2% at 32k to 36.6% at 1M…
Mar 2026 · github.com · its alternatives →
- 11
We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…
Mar 2026 · github.com · its alternatives →
- 12
An information-flow policy engine for LLM agents.
23d ago · openappa.com · its alternatives →
- 13
Hi! I’m Nathan: an ML Engineer at Mozilla.ai: I built agent-of-empires (aoe): a CLI application to help you manage all of your running Claude Code/Opencode sessions and know when they are waiting for you. - Written in rust and relies on tmux for security and reliability - Monitors state of cli sessions to tell you when an agent is running vs idle vs waiting for your input - Manage sessions by naming them, grouping them, configuring profiles for various settings I'm passionate about getting self-hosted open-weight LLMs to be valid options to compete with proprietary closed models. One…
Jan 2026 · github.com · its alternatives →
- 14
- 15
Arlopass▲81AI wallet that lets web apps use your models, not your keys
Mar 2026 · arlopass.com · its alternatives →
- 16
Hey Everyone, Almost year ago we launched Permify an open-source authorization service to build fine-grained and scalable user permissions and access control systems over here(https://news.ycombinator.com/item?id=32096610) My co-founders and I had a enterprise solution agency where we worked with a bunch of fortune 500 companies. Each projects we made we have to re-invent the wheel for access control and authorization. Not having a easy to integrate, scalable and a granular system that can fulfill the requirements of these enterprise companies was a pain in the ass for us. As…
2023 · permify.co · its alternatives →
- 17
- 18
Kubet88 là nhà cái thể thao có thương hiệu lâu đời chuyên cung cấp thông tin về các giải đấu, kèo cược đa dạng, nạp rút nhanh, mức thưởng hàng đầu.
2022 · openpolicyregistry.io · its alternatives →
- 19
Your agent team, on your machine. Open-source harness for multi-user Claude agents. - yaodub/cast
Jun 2026 · github.com · its alternatives →
- 20
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. - Release v1.0.0-beta.9 · logto-io/logto
2022 · github.com · its alternatives →
- 21KO
2018 · klaro.kiprotect.com · its alternatives →
- 22
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2016 · github.com · its alternatives →
- 23
Secure and simplify infrastructure access with StrongDM’s Zero Trust PAM platform. Control, audit, and manage access across cloud, databases, servers, and apps from a single, unified solution.
2018 · strongdm.com · its alternatives →
- 24
The only way to go fast is full YOLO mode in your coding agent. I've got the local sandbox figured out (pro tip: Incus VMs work great) but I wanted to keep my agents from doing things like inadvertently blowing up my cloud services or chasing a prompt to POST to some random website. I struggle most with this on my side projects where my permission model isn't quite as robust as it is at the office. I started with a firewall on the Incus container but every time the agent needed access to something new, I was poking more holes in it - and it didn't differentiate between HTTP verbs. I've been…
Jul 2026 · trollbridge.dev · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →