Dev tools · alternatives · 2026
24 alternatives to Oathkeeper – Cloud-Native Identity and Access Proxy
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go. - ory/oathkeeper
Oathkeeper is a cloud-native identity and access proxy designed to manage authentication and authorization for applications and services. It handles identity verification and access control in distributed system… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Oathkeeper – Cloud-Native Identity and Access Proxy launched in 2018; newer entries below may have overtaken it.
- 1
Permit.io▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal
2023 · permit.io · its alternatives →
- 2
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 3
- 4
Pangolin is an open source self-hosted tunneled reverse proxy management server with identity and access control, designed to securely expose private resources through encrypted WireGuard tunnels running in user space. We made Pangolin so you retain full control over your infrastructure while providing a user-friendly and feature-rich solution for managing proxies, authentication, and access, all with a clean and simple dashboard web UI. GitHub: https://github.com/fosrl/pangolin Deployment takes about 5 minutes on a VPS:…
2025 · github.com · its alternatives →
- 5
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2022 · github.com · its alternatives →
- 6
One identity layer for your customers, APIs, and agents
Jul 2026 · monocloud.com · its alternatives →
- 7
Fine-Grained Permissions for AI-Powered Applications
2025 · permit.io · its alternatives →
- 8
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2023 · github.com · its alternatives →
- 9
Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…
Mar 2026 · permit.io · its alternatives →
- 10
Bearer Cloud▲115Manage product and application code security at scale
2023 · cycode.com · its alternatives →
- 11RT
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.
May 2026 · numa.rs · its alternatives →
- 12
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 13
- 14
Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL/MIT-licensed, so you can self-host it. Cheers!
2024 · stack-auth.com · its alternatives →
- 15
tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab - gnur/tobab
2020 · github.com · its alternatives →
- 16
Pangolin▲95Open-source identity-based VPN & remote access platform
Feb 2026 · pangolin.net · its alternatives →
- 17
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2024 · github.com · its alternatives →
- 18
A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML config file. - ytkoka/impersonate-proxy
Aug 2026 · github.com · its alternatives →
- 19
Hey HN! After 6 years of R&D, our small team is excited to share our project TideCloak - an IAM designed to help developers move fast without worrying about catastrophic breaches or overpowered admins with keys to the kingdom. Traditional IAMs rely on centralized authority - admins, root certificates, and decryption keys - which create glaring vulnerabilities in a breach. To address this, we’ve integrated Keycloak (Red Hat’s IAM) with a decentralized key architecture powered by our (academically validated) Ineffable Cryptography. Here’s the idea: keys are split across a decentralized network…
2024 · github.com · its alternatives →
- 20
- 21
Attribute-based access control with a policy UI and policy as code. User, resource, and environment attributes evaluated at decision time.
2022 · permit.io · its alternatives →
- 22
Inspekt▲98AI-powered API proxy for automated debugging and security
Mar 2026 · inspekt-api.vercel.app · its alternatives →
- 23
Manage your Cloud credentials locally and improve your workflow with the only open-source desktop app you’ll ever need.
2021 · leapp.cloud · its alternatives →
- 24
Identity-based, passwordless access to Windows hosts
2021 · goteleport.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →