About OpenFGA
OpenFGA is an open-source authorization solution that allows developers to build granular access control using an easy-to-read modeling language and friendly APIs. It is inspired by Google Zanzibar and is a CNCF Incubating project.
The engine supports Relationship-Based Access Control, Role-Based Access Control, and Attribute-Based Access Control use cases. It is designed to answer authorization check calls in milliseconds and includes SDKs for popular languages.
Key features
- Model any authorization system using a modeling language that supports ReBAC, RBAC, and ABAC
- SDKs for popular languages for easy integration
- Designed to answer authorization checks in milliseconds
- Built in the open with an RFC process and governance model
- CNCF Incubation Project
Good fit for
- Building granular access control for applications
- Implementing authorization for platforms of any size
OpenFGA: questions and answers
- What is OpenFGA used for?
- OpenFGA is an open-source authorization engine that lets developers build granular access control with a modeling language and APIs. It is a good fit for building granular access control for applications and implementing authorization for platforms of any size.
- Is OpenFGA open source?
- Yes. OpenFGA is open source under the Apache-2.0 licence. Its source code is on GitHub at openfga/openfga and is written mainly in Go.
- Is OpenFGA free?
- Yes. OpenFGA is open source, so the software itself is free to use.
- Can I self-host OpenFGA?
- Yes. OpenFGA can be self-hosted on your own server or infrastructure.
- What is OpenFGA an alternative to?
- OpenFGA is an open-source alternative to Permit.io, Authress and Oso. Other open-source alternatives to Permit.io include SpiceDB, Keto and OPA.
- Is OpenFGA actively maintained?
- Yes. The most recent commit to OpenFGA was on 13 October 2026, and the latest release is v1.22.0, published on 6 October 2026. The project has 6k stars on GitHub.
Open-source alternatives to OpenFGA
See all
SpiceDB
Auth & Identity
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grai
Apache-2.0vs Oso★ 7.1k
Keto
Open source
The most scalable and customizable permission server on the market. Fix your slow or broke
Apache-2.0vs Permit.io★ 5.4k
OPA
Open source
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.0vs Permit.io★ 12k
Keycloak
Auth & Identity
Open Source Identity and Access Management For Modern Applications and Services
Apache-2.0vs Auth0★ 37k
Pomerium
Security
Pomerium is an identity and context-aware access proxy.
Apache-2.0vs Cloudflare Zero Trust★ 5k
Logto
Auth & Identity
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC
MPL-2.0vs Auth0★ 15k
SaaS alternatives to OpenFGA
See all
Permit.io
Auth & Identity
Authorization-as-a-service with RBAC, ABAC and policy management
SaaS
Authress
Auth & Identity
Hosted login with fine-grained access control for SaaS applications
SaaS
Oso
Auth & Identity
Authorization service for modeling and enforcing app permissions with a policy language
SaaS
PlainID
Security
Enterprise authorization platform for data, APIs, and AI
SaaS
Auth0 Fine Grained Authorization (FGA)
Auth & Identity
Fine-grained authorization platform for securing multi-tenant B2B APIs, apps, and AI agents
SaaS
Cloudentity
Auth & Identity
Consumer identity and fraud prevention platform with passwordless authentication and risk scoring
SaaS

