Access Control - global, granular, lightning-fast

Manage user roles, rights, and permissions with access-control lists.

Global access control

Split-second decision making

Ory Keto is a consistent permission and authorization server with an easy and granular permission language, it is completely open source, and blazingly fast - globally. It is based on Google Zanzibar and ships gRPC and REST APIs.

curl.shindex.jsmain.go
curl -G \ 
--data-urlencode "subject=john" \
--data-urlencode "relation=access" \
--data-urlencode "namespace=files" \
--data-urlencode "object=file_a" \
http://keto-read-api/check
Your language, our SDK

Keto is polyglot

Ory Keto is written in Go and we provide SDKs for every language. It works behind any framework and integrates with any existing data structures and identifiers. Our documentation makes integrating Ory Keto a piece of cake.

Features

Control who can access what in your application. Ory Keto serves answers at scale globally with low latency.

Manage and Check Permissions

Determine if an entity (user, service, IoT) is allowed to perform an action using HTTP or gRPC APIs.

Low Latency and Highly Available

Ory Keto is based on Zanzibar, which has maintained 95th-percentile latency of less than 10 ms and availability greater than 99.99% over years of production use.

Flexible Permission Management

Ory Keto integrates with any existing data structures and identifiers.

Global Access Control

Coming soon: Deploy around the globe and provide a fast response no matter where your users are.

Strong Consistency

Coming soon: Provide a straightforward user experience by serving strong consistent responses using snaptokens.

Customer Feedback

The following reviews were collected on our website.

4 stars based on 110 reviews
Outstanding Access Control Implementation
Ory Keto helped us manage over 10,000 access policies seamlessly, improving our system efficiency by 30% within a month.
Reviewed by Harold Quimby (IT Security Manager)
Simplified Policy Management
We reduced our manual policy updates by 25% after integrating Ory Keto. It’s a time-saver for our team.
Reviewed by Miranda Colfax (DevOps Engineer)
Great for Cloud Environments
With Ory Keto, we scaled our microservices effortlessly, handling a 40% increase in user requests.
Reviewed by Vincent Holbrook (Cloud Architect)
Reliable Access Control Solution
Implemented across 15 applications, Ory Keto reduced unauthorized access incidents by 35%.
Reviewed by Nadine Rucker (CISO)
Impressive Performance Under Load
Handled 500k access requests daily without a hitch. Ory Keto delivers reliability.
Reviewed by Gregory Mullen (Systems Engineer)
Highly Scalable Access Management
Expanded our user base by 20% while maintaining seamless permission handling.
Reviewed by Joanne Vernet (Product Manager)
Versatile and Powerful
Ory Keto integrated perfectly with our existing identity management system, saving us weeks of work.
Reviewed by Derek Langley (Integration Specialist)
Seamless Integration
With Akeneo PIM, we’ve enhanced the quality and consistency of our product data, improving the customer experience.
Reviewed by Mr. Lucas Morgan (Data Analyst)
Efficient and Customizable
Customized policies for 30+ departments, improving overall access control by 28%.
Reviewed by Fiona Hightower (Compliance Officer)
Robust Policy Enforcement
Enforced over 8,000 complex policies flawlessly, boosting our security posture significantly.
Reviewed by Bradley Kent (Chief Technology Officer)
Solid Support and Documentation
Quickly resolved implementation issues with the help of detailed documentation and a responsive support team.
Reviewed by Shannon McBride (Technical Lead)

Got Questions? Find Answers Below!

Our Most Frequently Asked Questions

Ory Keto is an open-source access control server that implements Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC). It allows businesses to manage permissions and enforce policies at scale.
Ory Keto operates as a distributed, policy-based access control system. It enables developers to set fine-grained permissions and enforce them efficiently across microservices and cloud environments.
Ory Keto offers features such as granular access policies, distributed architecture, high scalability, and support for multiple access control models, including RBAC and ABAC.
Ory Keto is ideal for organizations of all sizes looking to secure their applications with robust access control mechanisms. It’s especially useful for companies operating in regulated industries or managing sensitive data.