Skip to main content

Welcome to Ory!

Ory is a software infrastructure provider building a global zero-trust network for humans, robots, devices, and software services. Ory develops open-source software on GitHub and publishes open standards such as the Ory Permission Language. Ory Cloud uses cloud-native open-source technologies (Kubernetes, Crossplane, Cockroach, Linux, Istio, Ory) and standards (OAuth 2.0/2.1, OpenID Connect, MITREid, WebAuthn, TOTP, FIDO3) to deliver a low-latency, planet-scale zero-trust infrastructure. Ory combines centuries of open-source, security, operational, and industry expertise with a user-centric and security-first mindset.

Ory Cloud's core infrastructure components are open source to foster collaboration, reduce supply chain risk, broaden access to secure services, and introduce the open standard for internet security. Being open source Ory improves the safety of everyone:

  • The Ory Identity Service is developed as an open-source project called Ory Kratos, introducing a new open standard for identity management.
  • The Ory OAuth2 & OpenID Connect Service is developed as an open-source project called Ory Hydra, implementing 15+ IETF and OpenID standards.
  • The Ory Permission Service is developed as an open-source project called Ory Keto, implementing Zanzibar: Google’s Consistent, Global Authorization System by Google.

Ory develops and maintains many additional open-source projects. From an Ory Zero Trust Identity & Access Proxy Ory Oathkeeper to developer tooling Ory Dockertest to language-specific libraries Ory Ladon. Ory has 170+ open-source repositories and over 35.000 GitHub stars.

Ory is production ready, on track to secure 1,000,000,000,000 API requests in 2022, running in over 50.000 live deployments, and improved hourly.

Why Ory is different​

Ory differentiates from other vendors in the following key areas:

  • Our core services and APIs are developed and licensed under Apache 2.0, allowing you to participate, collaborate, and understand the inner workings of Ory.
  • You can bring your own UI, in the programming language of your choosing, with the user experience that you like.
  • From designing Identity Schemas using JSON Schema, to webhooks, to advanced configuration options - Ory is the most customizable platform out there.
  • Ory spans the whole authentication and authorization universe with well-designed products and APIs:
  • Identity Management with session management, flows for login, registration, account recovery & verification, mfa, and many more.
  • Permission and Role Management.
  • Delegation via OAuth2 and OpenID Connect.
  • Zero Trust Networking.
  • Modern API design with partial support for gRPC.

Ory Cloud​

Ory Cloud is the commercial offering of Ory and is built on top of our popular open-source software. Our goal with Ory Cloud is to offer a planet-scale, low-latency, resilient, and secure service that's easy to use and set up.

In short: Ory Cloud is the most convenient and straightforward way to run Ory. Sign up at console.ory.sh for an account and create a free developer project.

Components​

Ory Cloud uses a variety of components - some are based on open-source projects and others are closed source.

Console​

The Ory Console is the management UI of Ory Cloud. It offers capabilities such as showing and searching for identities, managing user sessions, and gaining valuable insights in the form of dashboards and customization.

Managed UI​

The Managed UI implements screens such as login, registration, account recovery, account setting, and account verification. This allows for fast adoption of Ory.

Contrary to other vendors, Ory allows you to implement your own (login, registration, ...) UI by offering simple, headless APIs.

Identity & session services​

Ory Cloud incorporates the open-source Ory Kratos project and offers:

  • Self-service flows are everything users do on their own / without the help of others:
  • Registration with passwords, social sign in, OpenID Connect, ...
  • Login with passwords, social sign in, OpenID Connect, ...
  • Updating the profile, email, changing the password, un/linking with Social. Sign In providers, ...
  • Recovering the account by resetting the password.
  • Verifying email addresses, phone numbers, ....
  • Multi-factor authentication flows and recovery processes.
  • Administrative identity management to get, create, update, delete identities (users) and their data.
  • Headless APIs and data models allow you to fully customize Identity Schemas (for example adding fields like first name, accept tos, shipping address, gender, ...) and create your own login, registration, profile settings, recovery, and verification screen using our easy to use SDKs and REST APIs.

Permission services​

Ory Cloud incorporates the open-source Ory Keto project and offers:

  • Permission management to get, create, update, and delete permissions.
  • Permission checking to check if a user has a permission.

Ory open source​

Ory is the largest open source ecosystem in the area of authentication, authorization, access control, and zero trust networking in the world. Ory is not another company "greenwashing" with open source by publishing SDKs under open-source licenses. Instead, all of our core systems are available as Apache 2.0 licensed software without enterprise or open core models.

Head over to the Ory Open Source Overview for an introduction to the different projects.

Is open source taking a back seat?​

No! Ory Cloud is our commercial offering with which we generate revenue to build more open source and more features in Ory Cloud. Our value proposition and vision for Ory Cloud is to incorporate and advance the open-source ecosystem and add additional services which aren't possible to open source (for example Analytics, SLAs, SRE, Low-Latency).

Ory Cloud and our open-source software are interlinked. While we've made some modifications to the open source to make it work better in our multi-tenant environment and operational (SRE) model, we're using the same code base, APIs, features, and configurations for Ory Cloud.

In the future, we will increase our open-source footprint, make the projects easier to modify, use, access, and distribute. The only impact Ory Cloud will have is that it will accelerate development and enable us to spend more resources on the open source!

New to Ory ?​

Don't want to deal with Docker, Kubernetes, and securing your API?

  • Sign up for a free Developer account in Ory Cloud.

Example applications​

Explore Ory​

Read our in-depth concepts documentation

Watch video tutorials

Grok the API

And more...