Access Control - global, granular, lightning-fast

Manage user roles, rights, and permissions with access-control lists.

Get Started

Example use of Keto authorisation methods inside a UI

Trusted by

Global access control

Split-second decision making

Ory Keto is a consistent permission and authorization server with an easy and granular permission language, it is completely open source, and blazingly fast - globally. It is based on Google Zanzibar and ships gRPC and REST APIs.

Visit the documentation

Your language, our SDK

Keto is polyglot

Ory Keto is written in Go and we provide SDKs for every language. It works behind any framework and integrates with any existing data structures and identifiers. Our documentation makes integrating Ory Keto a piece of cake.

Run the Quickstart

Features

Control who can access what in your application. Ory Keto serves answers at scale globally with low latency.

Get started

Manage and Check Permissions

Determine if an entity (user, service, IoT) is allowed to perform an action using HTTP or gRPC APIs.

Low Latency and Highly Available

Ory Keto is based on Zanzibar, which has maintained 95th-percentile latency of less than 10 ms and availability greater than 99.99% over years of production use.

Flexible Permission Management

Ory Keto integrates with any existing data structures and identifiers.

Global Access Control

Coming soon: Deploy around the globe and provide a fast response no matter where your users are.

Strong Consistency

Coming soon: Provide a straightforward user experience by serving strong consistent responses using snaptokens.

Billions of Identities

Companies from all over the world rely on Ory for their identity needs.

> Requests secured overall

> Docker pulls overall

> GitHub stars overall

Ory components consider all modern technical aspects and it was a perfect fit for our system. Integration was easy and we are able to customize based on our requirements.

Akibur Rahman

System Architect, Padis GmbH

With Ory, I can build custom and secure ID infrastructure and APIs that fit perfectly into my client's ever-evolving cloud environments.

Ken Adler

Identity & Infosec, Thoughtworks

At Factly, we were looking for a lightweight alternative to Keycloak that would meet all our IAM needs across multiple applications. Ory, written in Golang was the best option out there which was simple and performant.

Shashi Deshetti

CoFounder, factly

Power up your stack

Explore Ory and the future of identity. Breeze through technical concepts, level up with our tutorials or master our extensive API reference.

Visit the documentation

Developer Chat on Slack

A community to help you succeed. Become a hero for developers, ask questions and participate in events.

Join the chat on Slack

GitHub Discussions

Chime in on GitHub and contribute code and insights to the open source projects that power Ory.

Explore our codebase