Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar
Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements. Would love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone / fork the repo here [1]. Many thanks! [0] https://www.aserto.com/blog/announcing-topaz-030 [1] https://github.com/aserto-dev/topaz
Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar launched on November 6, 2023 with 35 votes, #1,198 of 4,332 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 2 years on.
In plain words
Topaz is an open-source authorization service that combines authorization patterns from OPA and Zanzibar. Version 0.30 adds a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, and a test harness. It is designed for developers building authorization systems into applications and APIs who need flexible policy management and relationship-based access control capabilities.
written from the facts on this page · September 2026
From the sources
In this post, we share the new features and capabilities of Topaz 0.30, including an upgraded modeling language with generalized support for subject-relations and intersections. A console that makes it easy to visualize and edit the policy, model, objects, and relationships. An evaluation environment and templates for simple RBAC, multi-tenant RBAC, Google Docs, and ABAC scenarios, to name a few.
Time flies when you’re having fun… this week, we celebrated Topaz’s one-year anniversary! Topaz has come a long way in the last year, and we’re excited to announce version 0.30, launching this week at KubeCon North America 2023. Topaz is designed to be fast , flexible , and easy . By fast , we mean that authorization decisions are designed to take on the order of 1ms. By flexible , we mean that Topaz can run any authorization model (RBAC, ABAC, ReBAC), on any cloud. And by easy , we mean that it’s “falling-off-a-log easy” to integrate into your applications and APIs. Before we dive into what’s new, what makes Topaz special? It’s the only open source authorization service that combines the…from aserto.com
Does a similar job
all alternatives →
Topaz: open-source authorization combining the best of OPA and Zanzibar2022 · github.com · ▲132Cloud-native authorization for modern applications and APIs - aserto-dev/topaz
Permify – Open-source authorization service based on Google Zanzibar2022 · github.com · ▲122An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉 - Permify/permify
A new stdlib for Golang focusing on platform native support2023 · github.com · ▲154No gc, No goroutines, Produces small binaries while using the unmodified official go toolchain, and comes with complete Web SDK (generated from w3c/webref). We are building `pcz` to provide a reimagination of Go the language, in an effort to make it suitable for all kinds of programming tasks, and currently you can use it to build efficient web applications in Go using the generated Web SDK (as shown with the live web demo[1]). The journey is just starting, any suggestions? or any critics? [1]: https://primecitizens.github.io/livedemos/10-plat-web/
BoxyHQ – open-source alternative to Auth0/WorkOS2022 · boxyhq.com · ▲176Hi HN, we are Deepak and Sama, co-founders of BoxyHQ (https://boxyhq.com/). BoxyHQ provides an open-source platform for developers to quickly integrate enterprise features into their software solutions. These include SAML Single Sign-On (SSO), Audit logs, with more to come :) Every B2B startup faces a common challenge when it comes to selling into the Enterprise; they need to allocate time and resources to support all the requirements to make their offering enterprise-grade. Supporting these requirements is a significant undertaking for the engineering team, especially since…
Permify 1.0 – Open-source fine-grained authorization service2024 · github.com · ▲154Permify was born out of our repeated struggles with authorization. Like any other piece of software, authorization starts small but as things grow scaling it becomes a real pain and begins to hinder product development processes. Ad-hoc authorization systems scattered throughout your app’s codebase are hard to manage, reason about, and iterate on as the company grows. Also you will need to have more specific access controls as things grow. Traditional approaches like RBAC is inefficient for defining granular permissions such as resource-specific, hierarchical, or context-aware permissions.…
Open-Source, Google Zanzibar Inspired Authorization Service2023 · github.com · ▲7Hey HN, I recently shared my thoughts on why Google Zanzibar is a great solution for implementing authorization[1] and why we decided to build Warrant’s core authz service using key concepts from the Zanzibar paper. As I mentioned in the post, we recently open sourced the authz service powering our managed cloud service, Warrant Cloud[2], so I thought I’d share it with everyone here. Cheers! [1] https://news.ycombinator.com/item?id=36470943 [2] https://warrant.dev/
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 2d ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 30d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 28d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 25d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 23d ago · talanoa.email
Source: Show HN post ↗
Launched alongside, November 2023
the whole month →
Discover & book top creators to promote your product
Growth · 2023 · passionfroot.me
SpeedVitals▲829Hi HN, I’m Kashish, one of the co-founders of SpeedVitals, a platform for testing & monitoring website performance with a major emphasis on Core Web Vitals. Until now, our platform has only focused on Synthetic/Lab testing, such as Lighthouse tests and TTFB tests. But now, we have developed a Real-User Monitoring platform that doubles up as a Web Analytics tool. One major feature we have that most RUM tools lack is Performance Audits. Just like Lighthouse audits work on Lab test data, our audits work across all the real-user visits and gives suggestions on what task to prioritize first.…
Dev tools · 2023 · speedvitals.com