Ory
Open-source identity and access management infrastructure (Kratos, Hydra, Keto) with a managed cloud offering, positioned as a developer-controlled alternative to closed-source CIAM platforms.
Visit Website ↗ + Add to CompareOverview
Ory builds open-source identity and access infrastructure — including Ory Kratos (identity management), Ory Hydra (OAuth2/OIDC provider), Ory Keto (permissions/authorization), and Ory Oathkeeper (identity-aware proxy) — and sells Ory Network, a managed cloud version of the same stack, as an alternative to proprietary customer identity and access management (CIAM) platforms like Auth0 or Okta. The pitch to engineering teams is API-first, developer-controlled identity infrastructure that can run self-hosted or as a managed service, without the vendor lock-in of a closed-source IAM platform.
The open-source project dates to 2015; the commercial entity, Ory Corp, was formed in 2019 and is headquartered in Scottsdale, Arizona, with engineering roots in Munich, Germany. The company raised a $22.5 million Series A led by Insight Partners in 2022, followed by additional funding that brought total disclosed funding to roughly $28 million. Its open-source components are widely used independent of the commercial product: Ory Hydra and Ory Kratos have each accumulated more than 10,000 GitHub stars, and the projects are cited as identity infrastructure inside companies including Segment and Coinbase.
Ory’s core differentiation is genuine open-source adoption at real scale combined with a path to a managed, revenue-generating product — a harder trust bar to clear than closed-source marketing claims, since the code and its issues are publicly inspectable. The risk for buyers is the same one facing any open-core identity vendor: self-hosting requires real in-house expertise, and the managed Ory Network ties an organization back to a single commercial provider for its identity layer.
Innovation Matrix Assessment
Actively maintains multiple open-source projects (Kratos, Hydra, Keto, Oathkeeper) with frequent public commits and releases, and has continued to build out Ory Network's managed feature set since its 2022 Series A.
Covers a genuinely full identity stack — authentication, OAuth2/OIDC, fine-grained authorization, and an identity-aware proxy — as both self-hostable open source and a managed cloud service, which is broader technical scope than most single-purpose CIAM point products.
Raised a $22.5M Series A led by Insight Partners in 2022 and additional funding bringing total disclosed funding to roughly $28M, reasonable venture backing for its stage, though no larger growth round has been publicly reported since.
Open-sourcing core identity infrastructure that competes directly with closed-source incumbents like Auth0 and Okta is a genuinely different go-to-market and trust model, letting engineering teams audit and self-host the same code the vendor runs commercially.
Ory Hydra and Ory Kratos each exceed 10,000 GitHub stars with active issue trackers and public production usage reports (including from companies like Segment and Coinbase per Ory's own case material), giving unusually transparent, publicly-inspectable evidence of real-world reliability compared to closed-source competitors.
Customer and workforce identity infrastructure is core to zero-trust architectures, and open-source, self-hostable IAM addresses a real buyer concern (vendor lock-in and data residency) that closed-source CIAM platforms cannot fully answer.
Why CISOs Should Care
Gives security and platform engineering teams an auditable, self-hostable identity stack for customer and workforce authentication, reducing both vendor lock-in risk and the opacity of closed-source IAM code.
What Makes It Different
Unlike most CIAM vendors, Ory's core product is open source and independently auditable at the code level, with adoption verifiable through public GitHub activity rather than vendor-reported statistics alone.
The Matrix Verdict
58/100 — INCREMENTAL INNOVATOR
A credible, differentiated identity infrastructure vendor whose open-source model gives buyers unusually direct visibility into what they're actually deploying; funding scale is modest relative to closed-source IAM incumbents but its transparency is a genuine structural advantage.
Editorial Note: Claims vs. Verified Findings
GitHub star counts, the 2019 founding, and the 2022 Insight Partners-led Series A are independently verifiable via GitHub and press coverage (VentureBeat, PRNewswire). Specific named users of the open-source projects (e.g., Segment, Coinbase, Blues Wireless) are drawn from Ory's own community materials and were not independently confirmed with those companies.
Sources
Alternatives to Ory
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.