Ory Open Source
Apache-2.0 modular Go IAM: Kratos, Hydra, Keto, Oathkeeper
Auth / Auth · Apache-2.0 · 13.9k
What's Good
Apache-2.0. Self-host Kratos (identity), Hydra (OAuth2/OIDC), Keto (Zanzibar authz), Oathkeeper (IAP). Pick the pieces you need. Same APIs as OEL/Network.
The Catch
Vs Keycloak: modular Go you compose, not one Java IAM. LOUD: Ory own compare table still labels Ory Open Source Evaluation and prototyping; FAQ steers prototypes to OSS and scale to OEL/Network — print that. Ory Cloud/Network CUT as the free path. Not a Dex/Keycloak/Casdoor twin if the Catch stays modular-compose.
Verdict
Apache-2.0 modular Go IAM. Compose pieces; their table still says prototyping.
Embed
[](https://stackgems.com/gems/ory)