Linux Foundation fork of Vault's last MPL-licensed release. Manages secrets, certificates, and encryption keys with dynamic credential generation and fine-grained access policies.
Open-source IAM tools for developers and platform teams
Identity sits on the critical path of every application. Start with the identities, protocols and trust boundaries you must support, then evaluate recovery, key rotation, session control and administrative auditability.
For application developers, security engineers and platform teams implementing workforce identity, customer identity or service access.
The decision to make
Separate authentication, authorization, identity lifecycle and secrets management in the requirements. A strong tool in one layer may not replace the others.
5 matching tools
| Tool | Deployment | Source | API | Pricing model |
|---|---|---|---|---|
| OpenBao | Self-hosted | Open source | Available | open source |
| Ory | Self-hosted | Open source | Available | open source |
| SuperTokens | Self-hosted | Open source | Available | open source |
| Teleport | Self-hosted | Open source | Available | open source |
| Zitadel | Self-hosted | Open source | Available | open source |
Ory builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.
SuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.
Teleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.
Zitadel is an open-source identity and access management platform with passwordless auth, multi-tenancy, and custom workflows. It's free up to 100 daily active users, with cloud Pro plans from $100/month and a self-hosted deployment option.