What is Ory Hydra used for?

Ory Hydra is a certified OAuth 2.0 and OpenID Connect server that plugs into your existing user management through headless APIs, self-hosted or hosted. It is a good fit for adding OAuth2 and OIDC to an existing user system, and single sign-on across several applications.

Is Ory Hydra open source?

Yes. Ory Hydra is open source under the Apache-2.0 licence. Its source code is on GitHub at ory/hydra and is written mainly in Go.

Yes. Ory Hydra is open source, so the software itself is free to use. A managed cloud version is also available, with paid plans from $770 per year.

Can I self-host Ory Hydra?

Yes. Ory Hydra can be self-hosted on your own server or infrastructure.

What is Ory Hydra an alternative to?

Ory Hydra is an open-source alternative to Auth0, Okta and Amazon Cognito. Other open-source alternatives to Auth0 include ZITADEL, Authorizer and Keycloak.

Is Ory Hydra actively maintained?

Yes. The most recent commit to Ory Hydra was on 29 July 2026, and the latest release is v26.2.0, published on 20 March 2026. The project has 18k stars on GitHub.

Ory Hydra: open-source alternative to Auth0, Okta

About Ory Hydra

Ory Hydra is an OAuth 2.0 authorization server and an implementation of OpenID Connect Core 1.0. It is designed as a standalone server without user management, so it connects to whatever identity provider you already use through a login and consent app, leaving you in control of the user interface.

It handles OAuth 2.0 and OpenID Connect flows, issues and validates tokens, manages clients, orchestrates login and consent flows and manages JWKS. The project says it is tuned for low latency and high throughput with modest resource use, and it is OpenID Certified. It works with any authentication endpoint, including Ory Kratos, and belongs to an ecosystem that also includes Oathkeeper for access proxying and Keto for access control policies.

Hydra is written in Go and licensed under Apache-2.0. You can consume it as a managed service on Ory Network or self-host it, and a quickstart, documentation and telemetry notes are provided in the repository.

Key features

OAuth 2.0 and OpenID Connect server
Token issuance and validation
Client management
Login and consent flow orchestration
JWKS management
Headless APIs for any identity provider

Good fit for

→Adding OAuth2 and OIDC to an existing user system
→Single sign-on across several applications

Built with: Go; Docker
Tags: oauth2; openid-connect; oidc; identity; authorization; sso; go; self-hosted

Ory Hydra: questions and answers

What is Ory Hydra used for?: Ory Hydra is a certified OAuth 2.0 and OpenID Connect server that plugs into your existing user management through headless APIs, self-hosted or hosted. It is a good fit for adding OAuth2 and OIDC to an existing user system, and single sign-on across several applications.
Is Ory Hydra open source?: Yes. Ory Hydra is open source under the Apache-2.0 licence. Its source code is on GitHub at ory/hydra and is written mainly in Go.
Is Ory Hydra free?: Yes. Ory Hydra is open source, so the software itself is free to use. A managed cloud version is also available, with paid plans from $770 per year.
Can I self-host Ory Hydra?: Yes. Ory Hydra can be self-hosted on your own server or infrastructure.
What is Ory Hydra an alternative to?: Ory Hydra is an open-source alternative to Auth0, Okta and Amazon Cognito. Other open-source alternatives to Auth0 include ZITADEL, Authorizer and Keycloak.
Is Ory Hydra actively maintained?: Yes. The most recent commit to Ory Hydra was on 29 July 2026, and the latest release is v26.2.0, published on 20 March 2026. The project has 18k stars on GitHub.