# Ory Open Source

> Apache-2.0 modular Go IAM: Kratos, Hydra, Keto, Oathkeeper

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://www.ory.com/open-source  
**GitHub:** https://github.com/ory/kratos  
**Added:** 2026-09-04

---

## The Hook

Ory Open Source is the modular Go IAM stack you compose instead of adopting one Java realm.

## What's Good

Apache-2.0. Self-host Kratos (identity), Hydra (OAuth2/OIDC), Keto (Zanzibar authz), Oathkeeper (IAP). Pick the pieces you need. Same APIs as OEL/Network.

## The Catch

Vs Keycloak: modular Go you compose, not one Java IAM. LOUD: Ory own compare table still labels Ory Open Source Evaluation and prototyping; FAQ steers prototypes to OSS and scale to OEL/Network — print that. Ory Cloud/Network CUT as the free path. Not a Dex/Keycloak/Casdoor twin if the Catch stays modular-compose.

## Verdict

Apache-2.0 modular Go IAM. Compose pieces; their table still says prototyping.