Open Source IAM and CIAM | Ory

Ory Open Source: modular and modern IAM & CIAM

Open-source powered, fully customizable Identity and Access Management solutions. Use them all or bolt-on individual solutions.

Ory’s Open Source tools provide modern, fully customizable Identity and Access Management solutions. They are supported by a large community of developers improving them with every pull-request.

Fully flexible, fully yours

Ory offers reliable APIs and services for authentication, authorization, access control, and delegation.

Compare deployment options

Ory Open Source

Ory Enterprise License

Ory Network

Cross-platform benefits

## We operate around the clock
to make sure your IAM runs the
way you need it to — our stats
speak for themselves

3.2B Identities managed

684.6M Total Docker image pulls

48.0K GitHub stars overall

Global Operating in 3 continents

Frequently asked questions

What is Ory, and why do developers use it?

Ory is an open source identity and access management platform built for developers who need modern authentication, authorization, and user management. It implements open standards like OAuth2, OpenID Connect, WebAuthn, and follows security best practices for zero trust and least privilege access. Ory’s modular architecture (Kratos, Hydra, Keto, Polis, and Oathkeeper) allows you to integrate it into your existing systems and deploy it anywhere from Kubernetes to cloud-native environments.

What are the deployment options for Ory?

You can use Ory in three main ways:

All options share the same APIs and data model, so you can move between them as your requirements evolve.

When should I consider the Ory Enterprise License?

Choose the Ory Enterprise License (OEL) when you need to:

When should I use Ory Network?

Use Ory Network when you prefer to focus on product development instead of managing infrastructure. The Ory Network provides:

Is Ory still open source if I use Ory Enterprise or Ory Network?

Yes. Ory’s core services: Hydra, Kratos, Polis, Keto, and Oathkeeper remain open source under the permissive Apache-2 license. Both Ory Enterprise License (OEL) and Ory Network build on this open foundation, extending it with higher-performance, production-grade features.

Can I migrate from open source Ory to Enterprise or Network later?

Yes. Ory is API-compatible across all editions. You can start with the open source stack and later:

What’s involved in maintaining a self-hosted Ory deployment?

Operating Ory yourself involves:

How does Ory handle security and compliance?

Security and privacy are core to Ory’s design.

How does Ory compare to identity providers like Auth0, Okta, or Ping Identity?

Ory differs fundamentally because it's open source, built on open standards, and architected cloud-native from the ground up. You can deploy it anywhere, inspect the code, and integrate it deeply into your architecture.

Ory Open Source ecosystem

Deploy Ory on your preferred infrastructure

Deploy on any infrastructure and take full control over authentication and user workflows of your application.

Documentation

import React, { useEffect, useState } from 'react';
import { FrontendApi, Configuration, Session } from '@ory/client';

const basePath = 'https://ory.example.com';

const ory = new FrontendApi(
  new Configuration({
    basePath,
    baseOptions: { withCredentials: true },
  }),
);

function Example() {
  const [session, setSession] = useState<Session | undefined>();

useEffect(() => {
    ory
      .toSession()
      .then(({ data }) => {
        setSession(data);
      })
      .catch((err) => {
        console.error(err);
        window.location.replace(`${basePath}/self-service/login/browser`);
      });
  }, []);

if (!session) {
    return <p>No session found.</p>;
  }

return <p>Welcome to, {session?.identity.traits.email}.</p>;
}

Try Ory today Start for free