abac

openfga

+34

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

octelium

+22

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

spicedb

+17

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

cerbos/cerbos

+9

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

apache/casbin

+8

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

awesome-iam

+5

👤 Identity and Access Management knowledge for cloud platforms

ory/keto

+4

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

casbin-jcasbin

+1

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

topaz

+1

Cloud-native authorization for modern applications and APIs