Linux Foundation fork of Vault's last MPL-licensed release. Manages secrets, certificates, and encryption keys with dynamic credential generation and fine-grained access policies.
Open sourceSelf-hostedAPIopen source
Technical shortlist
Open-source IAM tools for developers and platform teams
Identity sits on the critical path of every application. Start with the identities, protocols and trust boundaries you must support, then evaluate recovery, key rotation, session control and administrative auditability.
For application developers, security engineers and platform teams implementing workforce identity, customer identity or service access.
Lead with the workload
The decision to make
Separate authentication, authorization, identity lifecycle and secrets management in the requirements. A strong tool in one layer may not replace the others.
Directory fields in this matrix were refreshed through October 3, 2026. Follow each source link for current vendor information.
Available profiles
All tools →5 matching tools
| Tool | Deployment | Source model | API | Pricing model | Primary source |
|---|---|---|---|---|---|
| OpenBao | Self-hosted | Open source | Available | open source | Official source ↗ |
| Ory | Self-hosted | Open source | Available | open source | Official source ↗ |
| SuperTokens | Self-hosted | Open source | Available | open source | Official source ↗ |
| Teleport | Self-hosted | Open source | Available | open source | Official source ↗ |
| Zitadel | Self-hosted | Open source | Available | open source | Official source ↗ |
OryIdentity & Access ManagementOry builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.
Open sourceSelf-hostedAPIopen source
SuperTokensIdentity & Access ManagementSuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.
Open sourceSelf-hostedAPIopen source
TeleportIdentity & Access ManagementTeleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.
Open sourceSelf-hostedAPIopen source
ZitadelIdentity & Access ManagementZitadel is an open-source identity and access management platform with passwordless auth, multi-tenancy, and custom workflows. It's free up to 100 daily active users, with cloud Pro plans from $100/month and a self-hosted deployment option.
Open sourceSelf-hostedAPIopen source