Dev tools · alternatives · 2026
24 alternatives to Topaz: open-source authorization combining the best of OPA and Zanzibar
Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
Topaz is an open-source authorization system that combines features from OPA and Zanzibar. It is designed for developers who need to implement access control in their applications. The tool provides a unified approach… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Topaz: open-source authorization combining the best of OPA and Zanzibar launched in 2022; newer entries below may have overtaken it.
- 1
Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
2023 · aserto.com · its alternatives →
- 2
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉 - Permify/permify
2022 · github.com · its alternatives →
- 3
- 4
Permit.io▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal
2023 · permit.io · its alternatives →
- 5
Authorizer▲296Open source authentication and authorization solution
2021 · authorizer.dev · its alternatives →
- 6
Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
2024 · github.com · its alternatives →
- 7
- 8
Hey HN, I recently shared my thoughts on why Google Zanzibar is a great solution for implementing authorization[1] and why we decided to build Warrant’s core authz service using key concepts from the Zanzibar paper. As I mentioned in the post, we recently open sourced the authz service powering our managed cloud service, Warrant Cloud[2], so I thought I’d share it with everyone here. Cheers! [1] https://news.ycombinator.com/item?id=36470943 [2] https://warrant.dev/
2023 · github.com · its alternatives →
- 9
We just released a major upgrade to SigNoz with support for Logs management based on ClickHouse. Would love to get any feedback from the community here on what you think and any questions you may have for us Many big companies like Uber and Cloudflare have been shifting to ClickHouse as their main workhorse for Logs management seeing much better performance. for e.g Cloudflare recently shifted from Elastic to ClickHouse and are seeing 8x improvement in memory/cpu resource requirement in ingestion. This is our first release with Logs support and we have added support for: - Filtering…
2022 · github.com · its alternatives →
- 10
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data - Release v1.0.0 · authzed/spicedb
2021 · github.com · its alternatives →
- 11
Prisma Cloud is the most complete Cloud Native Application Protection Platform (CNAPP) for code to cloud security in any cloud, multicloud, and hybrid environment.
2017 · twistlock.com · its alternatives →
- 12
One identity layer for your customers, APIs, and agents
Jul 2026 · monocloud.com · its alternatives →
- 13
- 14OS
I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is…
2022 · its alternatives →
- 15GD
Hey HN! We're Parth and Faza and we'd like to introduce you to Gitopia - https://gitopia.com/. Our vision with Gitopia is to create a decentralized platform for open-source code collaboration that is both resilient against censorship and promotes free exchange of ideas. To make this vision a reality, we've developed tools that foster community-led governance and incentivize active participation. Our journey into the open-source world started with Google Summer of Code, where we contributed to syslog-ng and GDAL, respectively. It was a transformative experience that truly…
2023 · gitopia.com · its alternatives →
- 16
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 17
- 18
ZITADEL▲82Integrate user management and authentication easy as pie
2022 · github.com · its alternatives →
- 19
SSOReady▲144Open source developer tools for enterprise single sign-on
2024 · github.com · its alternatives →
- 20OO
Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.
2020 · osohq.com · its alternatives →
- 21
- 22EM
Hello Hacker News! We're Joseph, Kieran and David from elestio (https://elest.io/). We've built a platform that offers open-source software as a managed service - we take care of the OS and app updates, security, SSL, networking, backups, the whole deal. In 2009, we started deploying open-source software for websites and web apps we built, many for SMB and enterprise customers. Our process was basically: spin up VM's from a hosting provider, install the software we needed, then update it manually / when it was needed / critical, etc. Once we hit > 100…
2022 · its alternatives →
- 23
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2023 · github.com · its alternatives →
- 24
Realtime JavaScript Backend. . Contribute to CloudBoost/cloudboost development by creating an account on GitHub.
2017 · github.com · its alternatives →
Also compare
- Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar alternatives
- Permify – Open-source authorization service based on Google Zanzibar alternatives
- Aserto alternatives
- Permit.io alternatives
- Authorizer alternatives
- Permify 1.0 – Open-source fine-grained authorization service alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →