Ory
Open-source headless identity
Open-source, API-first, headless identity — Kratos, Hydra, Keto — self-host or run on Ory Network.
At a glance
- Category
- Open-source headless identity
- Ownership
- Independent (open source / venture-backed)
- Founded
- 2017
- Deployment
- Self-hosted · Cloud · Hybrid
- Pricing
- Open source (self-hosted); Ory Network usage tiers
- Experience
- Developer-first
- Segments
- B2B SaaS · Fintech · Ecommerce
Overview
Ory is an open-source identity stack: Kratos (identity and login), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (access proxy). It is fully headless and API-first, self-hostable, and offered as the managed Ory Network. It suits developers who want composable, open building blocks rather than a prebuilt platform.
Best for
Developer teams that want open-source, headless, composable identity building blocks they can self-host or run as managed Ory Network.
Consider alternatives if
You want prebuilt UI, an all-in-one managed platform, or minimal assembly over composable open-source components.
Capabilities
- SSO (SAML / OIDC) ✓
- SCIM provisioning —
- Multi-factor auth ✓
- Passwordless / passkeys ✓
- Social login ✓
- Self-hosted option ✓
Capability flags are directional, for shortlisting — verify against current vendor documentation before a decision.
Strengths
- Open source, API-first, and headless
- Composable: identity, OAuth2/OIDC, and permissions
- Self-hosted or managed via Ory Network
- Strong developer and community adoption
Considerations
- Headless model means you build the UI
- Composing the components requires engineering effort
- Smaller enterprise-support footprint than incumbents
Related reading
This profile is editorial and independent. Ory's directory listing is free — no placement here is paid, and sponsorship never buys a better verdict. Our neutrality charter.
← All vendors