Ory Keto is an open source authorization server that implements Google's Zanzibar model for managing permissions at scale.
The tool addresses the problem of slow or broken permission systems by providing a scalable, low-latency authorization platform based on Google's proven Zanzibar approach. It uses relationship-based access control to handle billions of relationships while maintaining sub-10ms permission checks. The system supports multiple access control models including ACL, RBAC, and more flexible relationship-based patterns through the Ory Permission Language.
Keto suits organizations that need to scale permission checks across large datasets or complex authorization requirements. It works as either a managed service on the Ory Network or as a self-hosted deployment, making it adaptable to different operational preferences. The tool is cloud native and designed for Kubernetes environments, with an API-first, headless architecture that integrates with any identity provider. Teams evaluating authorization solutions should consider Keto if their current systems struggle with latency or scalability, or if they need the flexibility of relationship-based access control rather than simpler permission models.
The project maintains active development with regular engagement through discussions and documentation updates. The codebase receives consistent attention to performance optimization and feature expansion around the Zanzibar model. Security is treated as a priority with a documented vulnerability disclosure process. The project includes telemetry capabilities for monitoring deployments in production environments.
