Control Incoming Traffic

Authenticate and authorize all traffic with a Zero Trust security model.

Example use of Oathkeeper IAM capabilities inside a UI

Ory Oathkeeper Features

Forward authorized requests and reject unauthorized ones. Ory Oathkeeper can act as a reverse proxy or interface with your existing API Gateway.

Identity and Access Proxy

Authorize HTTP requests to your server based on sets of Access Rules.

Zero Trust Architecture

Apply Zero Trust / BeyondCorp security in your tech stack. Ory Oathkeeper enables secure access for all users (e.g. employees, partners, customers).

Carefree Integration

Deploy alongside your existing API Gateways. Ory Oathkeeper plugs into Ambassador, Envoy, AWS API Gateway, Nginx and many more.

Enrich Data

Accumulate data from multiple sources and parse it into custom headers: X-User-ID, JSON Web Tokens and more.

Next Generation Oathkeeper

Coming soon: The next generation of Ory Oathkeeper. Learn more and submit feedback on GitHub.

With Ory, I can build custom and secure ID infrastructure and APIs that fit perfectly into my client's ever-evolving cloud environments.

Ken Adler // Identity & Infosec, Thoughtworks

Ory made it simple to add stable, secure user management and access control to our systems. No more reinventing the wheel!

Bill Monkman // Chief Architect, Commit

We enjoy using Ory because of the simplicity to integrate thanks to its modularity, its active and vocal developer base, and the extent and ease by which Ory tools can be configured.

Matt Brown // Bioinformatician, Dante Labs

Raspberry Pi
Kyma Project
Contraste Digital

Billions of Identities

Companies from all over the world rely on Ory for their identity needs. Ory technology secures billions of identity requests.


Requests secured

in September 2021


Docker pulls



GitHub stars


Start in minutes

Easy Integration

Ory Oathkeeper is an Open Source cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API. It authenticates, authorizes, and mutates incoming HTTP(s) requests, and is written in Go. Implementation is straightforward on any system.



SDKs for all languages

Ory Oathkeeper is written in Go and we provide SDKs for almost every language including Dart, .NET, Go, Java, PHP, Python, Ruby, Rust and Typescript. Our documentation makes integrating Ory Oathkeeper a snap.

Run the Quickstart
Oathkeeper SDKs for any programming language

Ready to get started?

Explore Ory and the future of identity. Make yourself heard in discussions and contribute directly to Ory on GitHub. Your code will be shipped in the next version.

Developer Chat on Slack

A community to help you succeed. Become a hero for developers, ask questions & participate in events.

GitHub Discussions

Make yourself heard on GitHub and contribute code and insights to the open source projects at the heart of Ory.