Ory is an open source ecosystem and a cloud offering authentication, authorization, access control, and delegation (OAuth2 & OpenID Connect) services and APIs.

Ory Network

The Ory Network is the fastest, most secure, and worry-free way to use Ory's Services. It provides the infrastructure for modern end-to-end security:

  • Identity & credential management scaling to billions of users and devices
  • Registration, login, and account management flows for passkeys, biometric authentication, social sign-in, SSO, and multi-factor authentication
  • Pre-built login, registration, and account management pages and components
  • OAuth2 and OpenID Connect provider for single sign-on, API access, and machine-to-machine authorization
  • Low-latency permission checks based on Google's Zanzibar model and with built-in support for the Ory Permission Language

It's fully managed, highly available, developer & compliance-friendly!

  • GDPR-friendly secure storage with data locality
  • Cloud-native APIs, compatible with Ory's open-source servers
  • Comprehensive admin tools with the web-based Ory Console and the Ory Command Line Interface (CLI)
  • Extensive documentation, straightforward examples, and easy-to-follow guides
  • Fair, usage-based pricing

Sign up for a free developer account today!

Ory Open-Source Servers

  • Ory Kratos is a fully customizable, API-only platform for login, two-factor authentication, social sign-in, passwordless flows, registration, account recovery, email / phone verification, secure credentials, identity and user management.
  • Ory Hydra is an API-only, "headless," OAuth 2.0 and OpenID Connect provider that can interface with any identity and user management system, such as Ory Kratos, Firebase, your PHP app, LDAP, SAML, and others.
  • Ory Oathkeeper is a zero trust networking proxy and sidecar for popular ingress services and API gateways. It checks if incoming network request are authenticated and allowed to perform the requested action.
  • Ory Keto is the world's first and leading open-source implementation of Google's Zanzibar research paper, an infinitely scalable and blazing fast authorization and permissioning service - RBAC on globally distributed steroids.



Third-party integrations and docs are managed by Supabase partners.