Ory
ory.com
What it is
Ory provides identity and access management for customer apps, business partners, machines, and AI agents. Its capabilities include authentication, user identity management, OAuth2 and OIDC, single sign-on, multi-factor authentication, and fine-grained permissions. The platform is modular and headless, with teams retaining control of their UI and UX. Deployment options include open-source self-hosted components, a self-hosted enterprise license, and managed cloud IAM through Ory Network. Its integration directory covers services such as GitHub, Google Workspace, and HubSpot, and protocols including SAML, SCIM, OAuth 2.0, and webhooks. Ory lists a free Developer tier, Production at $770 a year, and Growth at $9,350 a year. Production includes one production, three staging, and five development environments; Growth includes two production, five staging, and 20 development environments. B2B authentication is limited to Growth and Enterprise. Ory also lists customer SSO, social login, passkeys, customer profiles, directory sync, lifecycle provisioning, and adaptive access policies.
Spec sheet
- Purpose
- Ory provides identity and access management for customer apps, business partners, machines, and AI agents.Read 4 Oct 2026 · ory.com
- Deployment
- Ory offers open-source self-hosted components, a self-hosted enterprise license, and fully managed cloud IAM through Ory Network.Read 4 Oct 2026 · ory.com
- Integrations
- Ory lists integrations including Microsoft Entra ID, Google Workspace, GitHub, GitLab, AWS API Gateway, HubSpot, and Google reCAPTCHA.Read 14 Oct 2026 · ory.com
- Compliance
- Ory describes its products as GDPR compliant and privacy focused, and its 2026 company timeline states that Ory achieved PCI DSS compliance.Read 4 Oct 2026 · ory.com
- Support
- The Enterprise plans include premium support with SLAs, and Ory Network Enterprise lists a 99.99% uptime SLA.Read 4 Oct 2026 · ory.com
- Founded
- 2019Read 28 Sep 2026 · ory.com
- API and extensibility
- Ory documents REST APIs, SDKs, a CLI, quickstarts, and product-specific guides in its developer portal.Read 14 Oct 2026 · ory.com
- Architecture
- Ory describes its platform as cloud native, modular, headless, and designed to let teams own their UI and UX.Read 4 Oct 2026 · ory.com
- Capabilities
- Its listed capabilities include authentication, user identity management, OAuth2 and OIDC, single sign-on, multi-factor authentication, and fine-grained permissions.Read 4 Oct 2026 · ory.com
- CLI platforms
- Ory's CLI installation instructions cover macOS, Linux, and Windows.Read 4 Oct 2026 · ory.com
- Cloud infrastructure
- Ory says its cloud runs on Google Cloud Platform, logs access for auditing and incident analysis, and distributes services across multiple data centers and zones.Read 4 Oct 2026 · ory.com
- Company funding
- Ory announced a $22.5 million Series A in December 2021 and a $5 million Series A extension in April 2024.Read 14 Oct 2026 · ory.com
- Company headquarters and founding
- Ory Corp's LinkedIn profile lists Scottsdale, Arizona as headquarters and 2019 as its founding year.Read 14 Oct 2026 · linkedin.com
- Company history
- Ory's company page includes a 2015 milestone in its timeline; it does not state an exact founding date in the opened content.Read 4 Oct 2026 · ory.com
- Company legal name
- Ory identifies the company as Ory Corp on its website and LinkedIn profile.Read 14 Oct 2026 · ory.com
- Company size
- Ory Corp's LinkedIn profile lists a company size of 11–50 employees.Read 14 Oct 2026 · linkedin.com
- Data protection
- Ory states it enforces HTTPS with TLS 1.2+, encrypts data at rest with AES-256, and stores passwords using salted bcrypt.Read 4 Oct 2026 · ory.com
- Deployment choices
- Ory offers a managed Ory Network service, a self-hosted Ory Enterprise License, and self-hosted open-source components.Read 14 Oct 2026 · ory.com
- Documentation and community support
- Ory provides guided docs, quickstarts, REST references, SDK and CLI references, troubleshooting material, Slack, GitHub Discussions, and Stack Overflow links.Read 14 Oct 2026 · ory.com
- Encryption and password storage
- Ory states that it enforces TLS 1.2 or higher, encrypts stored data with AES-256, and hashes passwords with salted bcrypt.Read 14 Oct 2026 · ory.com
- Feature: Authentication methods
- Kratos documents passwords, passwordless codes, passkeys, social sign-in, and multi-factor authentication.Read 14 Oct 2026 · ory.com
- Feature: Custom identity data
- Kratos lets teams adapt identity data models with JSON Schema-based identity schemas.Read 14 Oct 2026 · ory.com
- Feature: Enterprise federation
- Polis bridges SAML and OIDC identity providers and supports SCIM directory synchronization for enterprise SSO use cases.Read 14 Oct 2026 · ory.com
- Feature: Fine-grained permissions
- Keto supports relationship-based permission models, including RBAC and ABAC patterns, through Ory Permission Language.Read 14 Oct 2026 · ory.com
- Feature: Identity management
- Kratos supports account registration, login, verification, recovery, profile management, and administrative identity APIs.Read 14 Oct 2026 · ory.com
- Feature: OAuth and OIDC
- Hydra provides OAuth 2 and OpenID Connect capabilities for SSO, API access, third-party applications, and server-to-server communication.Read 14 Oct 2026 · ory.com
- Feature: Request authorization proxy
- Oathkeeper can operate as a reverse proxy or an access-control decision API to authenticate and authorize HTTP requests.Read 14 Oct 2026 · ory.com
- Install and deployment guidance
- Ory's Kratos documentation describes installation on Linux, macOS, Windows, and Docker, database configuration, Kubernetes deployment, and source builds.Read 14 Oct 2026 · github.com
- Limit: documentation
- G2 reviewers report that documentation can be hard to navigate, confusing, outdated, or short on practical examples for advanced setups.Read 14 Oct 2026 · g2.com
- Limit: feature gaps and OSS cadence
- G2 reviewers mention missing admin or client-side conveniences, slow open-source feature development, and some advanced capabilities being limited to paid offerings.Read 14 Oct 2026 · g2.com
- Limit: identity schema cleanup
- A Gartner Peer Insights review title identifies difficulty deleting unused identity schemas as a limitation.Read 14 Oct 2026 · gartner.com
- Limit: learning curve and operations
- G2 reviewers say initial configuration can be complex and that managing multiple self-hosted services can demand infrastructure expertise.Read 14 Oct 2026 · g2.com
- Notable news: Hydra release
- Ory's November 10, 2025 v25.4.0 release notes describe Hydra support for the OAuth device authorization grant and OAuth 2.1 discovery.Read 14 Oct 2026 · changelog.ory.com
- Open-source license
- Ory states that its software is licensed under Apache 2.0; the Kratos GitHub repository also identifies Apache-2.0.Read 14 Oct 2026 · ory.com
- Plan limits
- The pricing comparison lists B2B authentication as unavailable on Developer and Production and available on Growth and Enterprise.Read 4 Oct 2026 · ory.com
- Praise: flexibility and customization
- G2 reviewers repeatedly praise Ory's configurable authentication flows, modular components, and ability to tailor identity handling to their systems.Read 14 Oct 2026 · g2.com
- Praise: integration and support
- G2 reviewers mention straightforward integration and helpful, knowledgeable support as strengths.Read 14 Oct 2026 · g2.com
- Praise: performance and reliability
- G2 reviewers describe Ory as stable and performant in production, with some noting that it scales reliably under load.Read 14 Oct 2026 · g2.com
- Protocols
- The integrations directory includes OIDC, SAML, SCIM, OAuth 2.0, JWT, SMTP, REST API, and webhooks.Read 4 Oct 2026 · ory.com
- Rating on Capterra
- 0.0 out of 5 from 0 reviewsRead 14 Oct 2026 · capterra.com
- Rating on G2
- 4.5 out of 5 from 54 reviewsRead 14 Oct 2026 · g2.com
- Rating on Gartner Peer Insights
- 4.6 out of 5 from 5 reviewsRead 14 Oct 2026 · gartner.com
- SDK languages
- The Hydra SDK page lists Dart, .NET, Elixir, Go, Java, JavaScript/TypeScript, PHP, Python, Ruby, and Rust clients.Read 14 Oct 2026 · ory.com
- SDK limitation
- The Hydra SDK does not implement complete OAuth flows such as authorization-code and refresh flows, and its generated code may not remain backward compatible across versions.Read 14 Oct 2026 · ory.com
- Security and compliance claims
- Ory lists ISO 27001, SOC 2 Type 2, GDPR, and PCI DSS compliance or certification for its identity platform.Read 14 Oct 2026 · ory.com
- Security practices
- Ory says it scans for vulnerabilities in CI/CD and running containers, conducts third-party penetration tests, and runs a public disclosure and reward program.Read 14 Oct 2026 · ory.com
- Self-hosting requirements
- Kratos can run on Linux, macOS, or Windows and supports SQLite, PostgreSQL, MySQL, and CockroachDB as its database dependency.Read 14 Oct 2026 · ory.com
- What Ory does
- Ory provides identity and access management services for customer, business, workforce, machine, and AI-agent identities, including authentication and authorization.Read 14 Oct 2026 · ory.com
Plans and prices
Production $770 a year $770 / year 1 production environment · 3 staging environments · 5 development environments · $21.00 included monthly credit Read 4 Oct 2026 · ory.com
Growth $9,350 a year $9,350 / year 2 production environments · 5 staging environments · 20 development environments · B2B SSO (OIDC only) · $255.00 included monthly credit Read 4 Oct 2026 · ory.com
Enterprise Priced on request Multi-region deployments with data residency · Multi-tenancy · Premium support with SLAs · 99.99% uptime SLA Read 4 Oct 2026 · ory.com
Ory Enterprise License Priced on request Self-hosted · premium enterprise integrations · premium support with SLAs Read 14 Oct 2026 · ory.com
Developer Free 1 member · 2 development environments · 0 production environments · 0 staging environments Read 4 Oct 2026 · ory.com
Ory Network Developer Free Developer tier · free account for testing and proof of concept Read 14 Oct 2026 · ory.com
Ory Network Production $770 a year $770/year SaaS · 1 production environment and 3 staging environments · permissions and machine-to-machine tokens · usage charges may apply Read 14 Oct 2026 · ory.com
Ory Network Growth $9,350 a year $9,350/year SaaS · 2 production environments and 5 staging environments · advanced analytics · B2B SSO (OIDC only) · usage charges may apply Read 14 Oct 2026 · ory.com
Ory Network Enterprise Priced on request Managed SaaS · multi-region deployments with data residency · multi-tenancy · premium support with SLAs · 99.99% uptime SLA Read 14 Oct 2026 · ory.com
Strong points and limits
Strong points
- Supports self-hosted and managed cloud deployment.
- Includes authentication, SSO, MFA, and fine-grained permissions.
- Free Developer tier is listed.
- Supports SAML 2.0, OIDC, and OAuth 2.0.
Limits
- B2B authentication is unavailable on Developer and Production.
- Production costs $770 a year.
- Growth costs $9,350 a year.
Who it suits
Ory suits teams building identity and access management into customer, partner, machine, or AI-agent products. Its self-hosted and managed options serve teams with different deployment preferences.
Verdict
Ory combines a broad identity feature set with self-hosted and managed deployment choices. Check the tier limits and listed annual prices, especially if B2B authentication is required.
Where Specifiction places it
- Biometric Authentication Software#2 of 458.9
- Identity and Access Management Software#5 of 458.8
- Single Sign-On Software#4 of 348.9
- Passkey Authentication Software#7 of 558.9
- Passwordless Authentication Software#4 of 278.9
- OAuth Server Software#5 of 328.7
- Customer Identity and Access Management Software#5 of 298.9
