2 editor-verified alternatives · SpiceDB overview →
source: tools.alternatives · stored order · active records only; review scores are annotations and never change membership or order
OpenFGA is an open-source authorization engine inspired by Google Zanzibar, built and maintained by Okta (Auth0). It provides relationship-based access control with a flexible modeling language, sub-millisecond permission checks, and SDKs for major languages. OpenFGA is used by companies including Grafana Labs, Canonical, and Docker for fine-grained access control in multi-tenant applications.
Authentik is an open-source Identity Provider supporting SAML, OAuth2/OIDC, LDAP, RADIUS, and SCIM for self-hosted single sign-on. It provides customizable authentication flows, multi-factor authentication, user management, and proxy-based SSO for applications without native support. Positioned as a modern Keycloak alternative with 22K+ GitHub stars, free Open Source use, and paid Enterprise/Enterprise Plus plans.
OpenFGA, Authentik — see all open-source developer tools.
OpenFGA tops our editor-verified list of 2 SpiceDB alternatives.
Yes — OpenFGA, Authentik are open source.