GitHub stars · StarDay

1apache / casbinApache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.GoApache-2.0 · Permissive20,482

2authzed / spicedbOpen Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization dataGoApache-2.0 · Permissive7,202

3openfga / openfgaA high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.GoApache-2.0 · Permissive6,103

4Permify / permifyAn open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉GoAGPL-3.0 · Share derivative source5,969

5ory / ketoThe most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.GoApache-2.0 · Permissive5,418

6cerbos / cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.GoApache-2.0 · Permissive4,647

7octelium / octeliumA next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.GoAGPL-3.0 · Share derivative source4,155

8apache / casbin-node-casbinAn authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and BrowserTypeScriptApache-2.0 · Permissive2,922