Dev tools · alternatives · 2026
24 alternatives to Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar
Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
Topaz is an open-source authorization service that combines authorization patterns from OPA and Zanzibar. Version 0.30 adds a new authorization schema language, a built-in visual console, REST APIs for the ReBAC… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar launched in 2023; newer entries below may have overtaken it.
- 1

Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
2022 · github.com · its alternatives →
- 2

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉 - Permify/permify
2022 · github.com · its alternatives →
- 3

We just released a major upgrade to SigNoz with support for Logs management based on ClickHouse. Would love to get any feedback from the community here on what you think and any questions you may have for us Many big companies like Uber and Cloudflare have been shifting to ClickHouse as their main workhorse for Logs management seeing much better performance. for e.g Cloudflare recently shifted from Elastic to ClickHouse and are seeing 8x improvement in memory/cpu resource requirement in ingestion. This is our first release with Logs support and we have added support for: - Filtering…
2022 · github.com · its alternatives →
- 4

No gc, No goroutines, Produces small binaries while using the unmodified official go toolchain, and comes with complete Web SDK (generated from w3c/webref). We are building `pcz` to provide a reimagination of Go the language, in an effort to make it suitable for all kinds of programming tasks, and currently you can use it to build efficient web applications in Go using the generated Web SDK (as shown with the live web demo[1]). The journey is just starting, any suggestions? or any critics? [1]: https://primecitizens.github.io/livedemos/10-plat-web/
2023 · github.com · its alternatives →
- 5

- 6

Hi HN, we are Deepak and Sama, co-founders of BoxyHQ (https://boxyhq.com/). BoxyHQ provides an open-source platform for developers to quickly integrate enterprise features into their software solutions. These include SAML Single Sign-On (SSO), Audit logs, with more to come :) Every B2B startup faces a common challenge when it comes to selling into the Enterprise; they need to allocate time and resources to support all the requirements to make their offering enterprise-grade. Supporting these requirements is a significant undertaking for the engineering team, especially since…
2022 · boxyhq.com · its alternatives →
- 7

- 8

Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
2024 · github.com · its alternatives →
- 9

Hey HN, I recently shared my thoughts on why Google Zanzibar is a great solution for implementing authorization[1] and why we decided to build Warrant’s core authz service using key concepts from the Zanzibar paper. As I mentioned in the post, we recently open sourced the authz service powering our managed cloud service, Warrant Cloud[2], so I thought I’d share it with everyone here. Cheers! [1] https://news.ycombinator.com/item?id=36470943 [2] https://warrant.dev/
2023 · github.com · its alternatives →
- 10

I'm excited to finally launch Outstatic, an open source static website CMS that doesn't require a complicated setup or signing up to a third-party service! You can access the documentation here: Outstatic Documentation. I invite you to start by deploying our example blog to Vercel and giving it a try. I think you'll be pleasantly surprised at how easy and fun it is to use Outstatic. Please, let me know what you think. This is the first public version of the project and all feedback is welcome. If you dig the project feel free to leave a star on Github. I appreciate your support!
2022 · outstatic.com · its alternatives →
- 11

- 12

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2023 · github.com · its alternatives →
- 13
ZITADEL▲82Integrate user management and authentication easy as pie
2022 · github.com · its alternatives →
- 14
Pangea AuthZ▲18Next-level access controls that scale with compliance needs
2024 · crowdstrike.com · its alternatives →
- 15

Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL/MIT-licensed, so you can self-host it. Cheers!
2024 · stack-auth.com · its alternatives →
- 16

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data - Release v1.0.0 · authzed/spicedb
2021 · github.com · its alternatives →
- 17

🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. - Release v1.0.0-beta.9 · logto-io/logto
2022 · github.com · its alternatives →
- 18ZA
Zazu is a new open source productivity app, that allows developers to be in the drivers seat. Unlike other solutions, there are no built in integrations, so every plugin has the full scope of what Zazu has to offer.
2017 · zazuapp.org · its alternatives →
- 19OS
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is…
2022 · its alternatives →
- 20

🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. - logto-io/logto
2022 · github.com · its alternatives →
- 21

- 22OO
Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.
2020 · osohq.com · its alternatives →
- 23

Logto adds multi-tenancy, enterprise SSO, and RBAC to your SaaS or AI apps. All with OIDC and OAuth 2.1 made simple, fast, and developer-friendly.
2022 · logto.io · its alternatives →
- 24

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2024 · github.com · its alternatives →
Also compare
- Topaz: open-source authorization combining the best of OPA and Zanzibar alternatives
- Permify – Open-source authorization service based on Google Zanzibar alternatives
- SigNoz – open-source alternative to DataDog, NewRelic alternatives
- A new stdlib for Golang focusing on platform native support alternatives
- Stack Auth (YC S24) alternatives
- BoxyHQ – open-source alternative to Auth0/WorkOS alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →