About Keto
Keto is a permission server written in Go that implements Google's Zanzibar approach for access control. It supports ACL, RBAC, and other permission models. The software is cloud native, headless, and API-first.
Key features
- Supports ACL, RBAC, and more permission models
- Based on Google's Zanzibar approach
- Written in Go
- Cloud native, headless, API-first
Keto: questions and answers
- What is Keto?
- Keto is a permission server that implements Google's Zanzibar approach and supports ACL, RBAC, and other permission models.
- Is Keto open source?
- Yes. Keto is open source under the Apache-2.0 licence. Its source code is on GitHub at ory/keto and is written mainly in Go.
- Is Keto free?
- Yes. Keto is open source, so the software itself is free to use. A managed cloud version is also available.
- Can I self-host Keto?
- Yes. Keto can be self-hosted on your own server or infrastructure.
- What is Keto an alternative to?
- Keto is an open-source alternative to Permit.io, Authress and Oso. Other open-source alternatives to Permit.io include SpiceDB, OpenFGA and OPA.
- Is Keto actively maintained?
- Yes. The most recent commit to Keto was on 4 September 2026, and the latest release is v26.2.0, published on 20 March 2026. The project has 5.4k stars on GitHub.
Open-source alternatives to Keto
See all
SpiceDB
Auth & Identity
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grai
Apache-2.0vs Oso★ 7.1k
OpenFGA
Security
A high-performance and flexible authorization/permission engine built for developers and i
Apache-2.0vs Permit.io★ 6k
OPA
Open source
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.0vs Permit.io★ 12k
Keycloak
Auth & Identity
Open Source Identity and Access Management For Modern Applications and Services
Apache-2.0vs Auth0★ 37k
Logto
Auth & Identity
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC
MPL-2.0vs Auth0★ 15k
Hexclave
Auth & Identity
Deploy your frontend, backend, and database together with Hexclave Deploy. Automatic scali
OSSvs Auth0★ 6.9k

Permit.io
Authress
Oso