The closest Ory Keto alternatives are Aserto, AuthZed and Keycloak. Picking an Ory Keto alternative comes down to fit: Access Management coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
Closest 48 alternatives shownClosest matches: Aserto, AuthZed, KeycloakPage updated Nov 2026
The product
by Ory Corp
Open source authorization server based on Google Zanzibar for access control
Ory Keto is a free Access Management solution made by Ory Corp. The closest matches by shared tags and NIST CSF 2.0 coverage are Aserto, AuthZed, Keycloak, Axiomatics Policy-driven Authorization, and Ascent InfoSec IAM. All 48 alternatives on this page are ranked the same way.
These 8 solutions overlap most with Ory Keto. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Fine-grained authorization service for apps and APIs with ~1ms latency.
Key features: 10 listed. See them on the Aserto page.
Shares 3 capabilities with Ory Keto: RBAC, Open Source, Authorization
Centralized authorization platform for fine-grained permissions at scale.
Key features: 9 listed. See them on the AuthZed page.
Shares 3 capabilities with Ory Keto: RBAC, Open Source, Authorization
Open source IAM server providing SSO, identity brokering, federation, and authorization.
Key features: 10 listed. See them on the Keycloak page.
Runtime ABAC authorization platform for apps, APIs, and AI agents using XACML/ALFA
Key features: 10 listed. See them on the Axiomatics Policy-driven Authorization page.
View Axiomatics Policy-driven AuthorizationAxiomatics Policy-driven Authorization alternativesOry Keto vs Axiomatics Policy-driven Authorization
Managed IAM service for user access control across enterprise resources.
Key features: 8 listed. See them on the Ascent InfoSec IAM page.
View Ascent InfoSec IAMAscent InfoSec IAM alternativesOry Keto vs Ascent InfoSec IAM
Real-time ABAC platform evaluating contextual attributes for dynamic access control.
Key features: 10 listed. See them on the Attribute-Based Access Control (ABAC) page.
View Attribute-Based Access Control (ABAC)Attribute-Based Access Control (ABAC) alternativesOry Keto vs Attribute-Based Access Control (ABAC)
Enterprise IAM platform with zero trust identity fabric capabilities
Key features: 10 listed. See them on the Broadcom Identity and Access Management page.
View Broadcom Identity and Access ManagementBroadcom Identity and Access Management alternativesOry Keto vs Broadcom Identity and Access Management
Identity platform for customer, workforce, B2B and AI identity: SSO, MFA, verification.
Key features: 9 listed. See them on the Ping Identity Platform page.
View Ping Identity PlatformPing Identity Platform alternativesOry Keto vs Ping Identity Platform
Open source IAM server providing SSO, identity brokering, federation, and authorization.
Runtime ABAC authorization platform for apps, APIs, and AI agents using XACML/ALFA
Managed IAM service for user access control across enterprise resources.
Real-time ABAC platform evaluating contextual attributes for dynamic access control.
Enterprise IAM platform with zero trust identity fabric capabilities
Identity platform for customer, workforce, B2B and AI identity: SSO, MFA, verification.
Centralized access management platform with SSO, MFA, and risk-based policies
SSO platform enabling users to authenticate once across multiple applications
Cloud-based IDaaS platform for identity and access management
On-premise federated identity mgmt system with SSO and MFA capabilities
Workforce IAM solution with SSO, MFA, and centralized access management
Multi-tenant IAM platform for MSPs and CSPs with SSO, MFA, and RBAC/ABAC
Real-time policy-based access control platform for enterprise authorization
Open-source identity provider with SSO, MFA, and application proxy capabilities
Federated IAM gateway for secure, compliant B2B partner access mgmt.
Real-time context engine unifying identity, data, and policy for access control.
Identity & authorization platform for human, API, and AI agent identities.
Identity-aware proxy and ZTNA for per-request app access with SSO, MFA and VPN
Identity server platform for managing authentication and access decisions
Enterprise identity and access management platform for workforce security
Cloud-based identity and access management solution for enterprises
Mac and mobile authentication with cloud IdP integration and ZTNA access.
Cloud-based IAM platform for identity mgmt, SSO, MFA, and lifecycle mgmt
Enterprise access management with SSO, MFA, and passwordless authentication
Manages secure access to shared mobile devices with fast authentication & SSO
Alibaba Cloud IDaaS is a cloud-native Identity and Access Management platform.
Access management platform with SSO, MFA, and conditional access controls
Enterprise SSO solution providing secure access to cloud and on-prem apps.
SSO platform enabling access to multiple apps with one set of credentials
Docker-based SSO solution with SaaS license mgmt and identity lifecycle integration
Cloud-based directory platform for identity, access, and device management
SSO solution for SAML and OIDC apps with MFA and user provisioning
Policy-driven conditional access control with dynamic authentication requirements
Passwordless workforce IAM with SSO, MFA, and device posture-based access control
Automated credential mgmt & SSO platform for apps without SAML/OIDC support
Access mgmt platform for nonstandard apps lacking SSO/SCIM support
Authentication & access mgmt solution with SSO, MFA, and password vault
Identity security platform for access by humans, AI agents, and machines
SSO solution with MFA integration for cloud and on-premises applications
SSO solution that reduces authentication prompts via continuous trust verification
IAM solution with user directory, SSO, MFA, and passwordless authentication
Duo access management: MFA, passwordless, SSO, adaptive policies, and device trust
Adaptive access control with MFA, SSO, and risk-based authentication policies
SSO solution for centralized authentication and access management
Enterprise SSO solution for password management and single authentication access
Common questions when weighing alternatives to Ory Keto.
The closest matches to Ory Keto by shared tags and NIST CSF 2.0 coverage are Aserto, AuthZed, Keycloak, Axiomatics Policy-driven Authorization, and Ascent InfoSec IAM. All of them are Access Management products.
This page shows 48 alternatives to Ory Keto, all in the Access Management category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
Ory Keto is a free Access Management product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
Ory Keto is a Access Management product in the IAM category. You can compare it with the 48 other Access Management products on this page.
Need the answer fast? Best Access Management Solutions for Business picks Microsoft Entra ID, Okta Single Sign-On, Ping Identity Platform and 4 more.See the shortlist
