{"data":{"slug":"ory","name":"Ory Open Source","tagline":"Apache-2.0 modular Go IAM: Kratos, Hydra, Keto, Oathkeeper","category":"nextjs","categoryName":"Next.js","url":"https://www.ory.com/open-source","github":"https://github.com/ory/kratos","pricing":"open-source","hook":"Ory Open Source is the modular Go IAM stack you compose instead of adopting one Java realm.","whatsGood":"Apache-2.0. Self-host Kratos (identity), Hydra (OAuth2/OIDC), Keto (Zanzibar authz), Oathkeeper (IAP). Pick the pieces you need. Same APIs as OEL/Network.","theCatch":"Vs Keycloak: modular Go you compose, not one Java IAM. LOUD: Ory own compare table still labels Ory Open Source Evaluation and prototyping; FAQ steers prototypes to OSS and scale to OEL/Network — print that. Ory Cloud/Network CUT as the free path. Not a Dex/Keycloak/Casdoor twin if the Catch stays modular-compose.","verdict":"Apache-2.0 modular Go IAM. Compose pieces; their table still says prototyping.","addedAt":"2026-09-04","featured":false,"domain":"Auth","subSpecialty":"Auth","capabilities":["auth","oauth","oidc"],"surfaces":["Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":13864},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/ory","html":"/gems/ory","markdown":"/gems/ory.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}