Dev tools · alternatives · 2026
24 alternatives to Open-Source, Google Zanzibar Inspired Authorization Service
Hey HN, I recently shared my thoughts on why Google Zanzibar is a great solution for implementing authorization[1] and why we decided to build Warrant’s core authz service using key concepts from the Zanzibar paper. As I mentioned in the post, we recently open sourced the authz service powering our managed cloud service, Warrant Cloud[2], so I thought I’d share it with everyone here. Cheers! [1] https://news.ycombinator.com/item?id=36470943 [2] https://warrant.dev/
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Open-Source, Google Zanzibar Inspired Authorization Service launched in 2023; newer entries below may have overtaken it.
- 1
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉 - Permify/permify
2022 · github.com · its alternatives →
- 2
Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
2022 · github.com · its alternatives →
- 3
Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
2023 · aserto.com · its alternatives →
- 4
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data - Release v1.0.0 · authzed/spicedb
2021 · github.com · its alternatives →
- 5
ZITADEL▲82Integrate user management and authentication easy as pie
2022 · github.com · its alternatives →
- 6
- 7
Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
2024 · github.com · its alternatives →
- 8
One identity layer for your customers, APIs, and agents
Jul 2026 · monocloud.com · its alternatives →
- 9
- 10
The easiest 3rd-party sign-in for your apps and APIs
2020 · its alternatives →
- 11
Can be deployed to Cloudflare or fully selfhosting. A simple demo site available with only Password Sign-in/Sign-up, OTP MFA, Passkey enrollment features enabled, no real email needed: https://auth-demo.valuemelody.com/
2025 · github.com · its alternatives →
- 12
- 13
Easy to implement permission system based on google zanzibar
2024 · its alternatives →
- 14
Bearer Cloud▲115Manage product and application code security at scale
2023 · cycode.com · its alternatives →
- 15OS
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is…
2022 · its alternatives →
- 16
- 17
It uses claude code with GLM-6 model which is cheap yet powerful for most of the cases. for deployment Cloudflare Workers. It is a 2 weeks of hard work! Lemme know what you think!
2025 · github.com · its alternatives →
- 18AN
Hello HN ! There’s been a lot of discussions [1,2] on how to build ReBAC [3] with Zanzibar and policy-as-code engines, but we (Permit) also think it’s important to talk about the interfaces on top of these implementations. We just launched a No-Code ReBAC interface - would love to know what you think. besides marrying the benefits of Policy as Code and Policy as Graph, the idea here is to create simple enough interfaces that everyone can use, so developers can set the stage and delegate the rest to others. We used Role-derivation as a concept to simplify a lot of the mechanics what should we…
2023 · its alternatives →
- 19
For the last month or so I've been working on bewCloud, and today I'm making its source code public and open! Right now, the Dashboard (URLs + freeform notes), News (RSS/Atom/JSON feeds), and Contacts (CardDav) are working. If you have any suggestions, comments, or recommendations, I'd love to hear it. Thank you for your attention and kindness. I really appreciate it!
2024 · bewcloud.com · its alternatives →
- 20GS
2019 · medium.com · its alternatives →
- 21
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
- 22
There are quite a few authentication services and libraries out there, but the vast majority treats tenants / organizations as an afterthought - in case of Firebase, tenants are literally in a different product. In B2B apps, users, tenants and data as fundamentally interrelated - users belong to tenants and authenticate in order to access data that belongs to the tenant. This means that user and auth data belong in the same database where the tenant data is stored (in our case, Postgres), and that the database should be aware of the user identity and control the access to tenant data.…
2025 · github.com · its alternatives →
- 23
Hi folks, I’m one of the maintainers and co-founder of the Go OSS project Permify (https://github.com/Permify/permify), an open-source authorization infrastructure inspired by Google Zanzibar. I would like to share a post where we aimed to provide a brief overview of how we integrated WASM with Golang to provide a richer user experience in our open-source playground. You can use the playground to create and test any authorization logic in a browser. The playground has three main sections: Schema: to model your authorization logic through our domanin specific language we…
2023 · permify.co · its alternatives →
- 24RT
rx is a lightweight CLI and runtime that lets you deploy any function instantly as you save it in your editor. It’s fast, simple, and takes care of setting up all your cloud infrastructure. The best dev experience with everything you need built-in: - auth - permissions - payments - secrets - storage - logs - email & SMS - and way more Related beta launch tweet: https://x.com/KhalidZoabi/status/1777673531972608249 Wanted to show it to you guys, gauge interest, and get some feedback. There's a large roadmap of upcoming stuff. Feel free to DM me on X for more information!
2024 · rx.run · its alternatives →
Also compare
- Permify – Open-source authorization service based on Google Zanzibar alternatives
- Topaz: open-source authorization combining the best of OPA and Zanzibar alternatives
- Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar alternatives
- SpiceDB – production-ready, open-source Google Zanzibar implementation alternatives
- ZITADEL alternatives
- Warrant alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →