Dev tools · alternatives · 2026

24 alternatives to Ory

The missing web-scale API for identity and access control

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Ory launched in 2023; newer entries below may have overtaken it.

1. 1
   Ory Kratos – Open-source identity server written in Go▲290

   Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

   2022 · github.com · its alternatives →

2. 2
   Open-source OAuth2 & OpenID server Ory Hydra v2▲108

   Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -

   2022 · github.com · its alternatives →

3. 3
   Run your own OAuth2 and OpenID Connect Provider▲88

   Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -

   2016 · github.com · its alternatives →

4. 4
   Run your own OAuth2/OpenID Connect provider▲161

   Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -

   2016 · github.com · its alternatives →

5. 5
   Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0▲88

   Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

   2023 · github.com · its alternatives →

6. 6HO
   Hydra – Open-Source OAuth2 Server▲190

   Ory Hydra is the open-source, OpenID Certified® OAuth 2.0 server and OpenID Connect provider. Cloud-native, API-first, and built for scale.

   2019 · gethydra.sh · its alternatives →

7. 7
   Open Source Auth0 alternative Ory Identifier First Auth and OTP MFA▲11

   Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

   2024 · github.com · its alternatives →

8. 8
   Open-source API Key server written in Go by Ory▲35

   Web-scale and security-hardened API key server for users, services, machine to machine, and AI agents. Token derivation brings fine-grained capability tokens to avoid common API key pitfalls. Apache2 open source for indie deployments, commercial for scalable and HA. - ory/talos

   Jun 2026 · github.com · its alternatives →

9. 9
   Anything API▲656

   Hey HN! We built Notte, a browser infrastructure and agents platform. Many of our users automate UI workflows or extract data from sites that don’t have APIs. In practice, we noticed that once an agent understands how a site works, parts of the task can often run without a browser by interacting with the same network requests the site uses. So we built Anything API: describe a browser task, and our agent explores the site, builds a function, tests it against your description, and deploys a callable REST endpoint. No infra to manage. How the build works: - Describe the task (best results come…

   Mar 2026 · anything.notte.cc · its alternatives →

10. 10
    OSS Auth0 Alternative Ory Kratos Now with Full PassKey Support▲41

    Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

    2024 · github.com · its alternatives →

11. 11
    A Go Library for Better Access Control▲158

    A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon

    2017 · github.com · its alternatives →

12. 12
    ORC – Onion Routed Cloud▲96

    2017 · orc.network · its alternatives →

13. 13
    Oathkeeper – Cloud-Native Identity and Access Proxy▲174

    A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go. - ory/oathkeeper

    2018 · github.com · its alternatives →

14. 14
    Graceful token refresh for open source OAuth2 Server Ory Hydra▲7

    Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. -

    2025 · github.com · its alternatives →

15. 15
    Kinde▲211

    Infrastructure for authentication, feature flags & billing

    2022 · kinde.com · its alternatives →

16. 16
    Pubky Core▲126

    Open-source protocol for a decentralized, user-owned web

    2024 · pubky.org · its alternatives →

17. 17
    Worldcoin▲241

    The world’s largest identity and financial network

    2023 · world.org · its alternatives →

18. 18
    MonoCloud for Startups▲167

    One identity layer for your customers, APIs, and agents

    Jul 2026 · monocloud.com · its alternatives →

19. 19AD
    A decentralized Internet identity system I'm working on.▲67

    2013 · nameblossom.org · its alternatives →

20. 20
    BoxyHQ – open-source alternative to Auth0/WorkOS▲176

    Hi HN, we are Deepak and Sama, co-founders of BoxyHQ (https://boxyhq.com/). BoxyHQ provides an open-source platform for developers to quickly integrate enterprise features into their software solutions. These include SAML Single Sign-On (SSO), Audit logs, with more to come :) Every B2B startup faces a common challenge when it comes to selling into the Enterprise; they need to allocate time and resources to support all the requirements to make their offering enterprise-grade. Supporting these requirements is a significant undertaking for the engineering team, especially since…

    2022 · boxyhq.com · its alternatives →

21. 21
    Fosite – OAuth2 framework for Go▲38

    Extensible security first OAuth 2.0 and OpenID Connect SDK for Go. - ory/fosite

    2016 · github.com · its alternatives →

22. 22
    React Native template for open source identity provider Ory Kratos▲51

    Developer documentation for Ory

    2020 · getory.io · its alternatives →

23. 23
    Ora 4.0▲105

    How you organize tasks, work and chat w/ you team & clients

    2022 · ora.pm · its alternatives →

24. 24RT
    Running the second public ODoH relay▲125

    Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH - had basically one well-known public relay operator (Frank Denis on Fastly Compute, default in dnscrypt-proxy). I built a second one and the client to talk to it.

    May 2026 · numa.rs · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →