ory/keto
View on GitHub ↗ ★ 5,417 Go
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
22 mentions on Hacker News by 21 people: 2 stories, 20 comments · first 2019-06-13 · latest 2025-12-24
20082026
-
…(https://github.com/Permify/permify) - Warrant (https://github.com/warrant-dev/warrant) - Ory Keto (https://github.com/ory/keto)
comment by mirzap · 2025-12-24 · in Permission Systems for Enterprise That Scale -
…Zanzibar implementation in the world and it’s part of Ory Network‘s global multi-region platform ( https://github.com/ory/keto ) A push model is also valid if you’re heavy on policies and can accept eventual consistency. We will…
comment by aeneas_ory · 2023-08-08 · in Blueprint for a distributed multi-region IAM with Go and CockroachDB -
…How do you usually do authorization-aware search? Imagine, I have a bunch of Google docs and using https://github.com/ory/keto for authorization. I can quickly answer the question "does user X have access to document Y", but it is not easy…
comment by throwaw12 · 2023-07-13 · in Ory Kratos v1.0 with passkeys, MFA and multi-region -
…also simple concepts but more powerful at scale) and open source implementations around it (e.g. https://github.com/ory/keto ) - why did you decide to build the same thing again, instead of collaborating with one of these projects? The…
comment by ryhotsi · 2022-11-03 · in Show HN: Open Source Authentication and Authorization -
How does Warrant compare to other Zanzibar based solutions like Ory Keto ? https://github.com/ory/keto
comment by drawqrtz · 2022-07-27 · in Launch HN: Warrant (YC S21) – Authorization and access control as a service -
…sourced around Google Zanzibar. On a timeline for context: - Ory came out first with Ory Keto ( https://github.com/ory/keto ) which is trying to be a close adaptation of the paper. Initially, many concepts were missing but they are making…
comment by scorpiopie · 2022-07-14 · in Show HN: Permify – Open-source authorization service based on Google Zanzibar -
…For a management UI you can use Ory Cloud :) For permissions, that’s a different service: https://github.com/ory/keto
comment by baconfly · 2022-06-09 · in Show HN: Ory Kratos – Open-source identity server written in Go -
…work? Can I bring my own authorization like oso etc. Absolutely! We have a project for this also: https://github.com/ory/keto Hope this clarifies your questions!
comment by claystraw · 2021-11-24 · in Show HN: Open-Source Auth for NextJS / React -
Implementation of Google's Zanzibar: https://github.com/ory/keto
comment by MaxRS · 2021-09-15 · in Why Authorization Is Hard -
…my second thought, how would this differ from something like Ory Keto[0] or Oath Keeper[1]? [0] https://github.com/ory/keto [1] https://github.com/ory/oathkeeper
comment by xmaayy · 2021-08-05 · in Launch YC S21: Meet the Batch, Thread #4 -
…to Ory Keto at all in this article. Ory Keto continued to evolve out of the shortcomings of OPA https://github.com/ory/keto/issues/47 . It's also based on Zanzibar, and it's used in production applications today. Cloud version coming soon…
comment by parkerhiggins · 2021-06-24 · in AuthZ: Scalable permissions system -
There is also Keto - an open source project based on the Zanzibar model [ https://github.com/ory/keto ]
comment by netvarun · 2021-06-24 · in AuthZ: Scalable permissions system -
Here’s an open source Zanzibar implementation: https://github.com/ory/keto Ory appears to offer a complete stack for the entire AuthN/AuthZ space: https://www.ory.sh (I haven’t used or evaluated this software)
comment by jitl · 2021-06-07 · in Himeji: A scalable centralized system for authorization at Airbnb -
…with the rest of the Ory ecosystem. We are actually testing it and looks great so far. [0]: https://github.com/ory/keto
comment by merqurio · 2021-04-29 · in Zanzibar: Google’s Consistent, Global Authorization System (2019) -
I was auditing Keto recently, I came across this discussion: https://github.com/ory/keto/issues/47 It's a impressive example of high functioning discourse: all the participants provide valuable insight, state concerns, elegantly summarize…
comment by MattyRad · 2021-04-08 · in Ory Keto, open source authorization server based on Google Zanzibar -
This is tracked here: https://github.com/ory/keto/issues/319 Basically the idea is to check the attributes before actually forwarding the request to Keto. That could be done through e.g. a OPA integration. This can scale much better IMO…
comment by zepatrik · 2021-04-08 · in Ory Keto, open source authorization server based on Google Zanzibar -
…This does not strike me as the kind of thing that can just be added after the project begins. https://github.com/ory/keto/blob/master/docs/docs/concepts/s...
comment by jeffbee · 2021-04-08 · in Ory Keto, open source authorization server based on Google Zanzibar -
…needs and what we want to offer because it can be very hard to meet certain performance goals (e.g. https://github.com/ory/keto/issues/104 ) Taking this simple approach allows us to provide a global, low latency, and consistent…
comment by neupatr · 2021-04-08 · in Ory Keto, open source authorization server based on Google Zanzibar -
…http://github.com/ory/kratos - Permission management, roles, who is allowed to do what - Ory Keto: http://github.com/ory/keto - OAuth2, OpenID Connect Provider that you "connect" to your user management (e.g. Ory Kratos) - Ory Hydra:…
comment by _hackerman · 2021-01-13 · in Ory Hydra 1.9: Open-source Golang OAuth2 provider -
See also https://github.com/open-policy-agent/opa (lower-level building-block) and https://github.com/ory/keto (built on OPA)
comment by adamfeldman · 2019-06-13 · in Evolving to Enterprise-Grade Permissions