#1 in Identity & Access ManagementUpdated 2026-08

Ory

by Ory · API-first identity and access management, self-hosted or managed

75.9 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Identity & Access Management ranking

Overview

Ory is an identity and access management platform covering customer login, B2B single sign-on, and machine and AI-agent identity. It is API-first and headless, split into components for identities (Kratos), OAuth2 (Hydra), permissions (Keto) and B2B federation (Polis). Run it as open source, self-hosted under an enterprise licence, or as the managed Ory Network.

Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Pricing: Free Developer tier, then Ory Network Production at $770/year and Growth at $9,350/year plus usage charges (from $0.14 per aDAU/month), with Enterprise and the self-hosted Enterprise License priced on request.
Runs on: WebSelf-hostedCLI

Strengths and trade-offs

Strengths

Runs open source, self-hosted, or as managed Ory Network
Headless and API-first, so you own the login UI
Per-unit prices published for users, tokens and permission checks
Passkeys, MFA and OpenID-certified OIDC on every tier

Trade-offs

SAML SSO, SCIM and directory sync are Enterprise-only
B2B organisations start at Growth and are capped at 3
Only Enterprise carries an SLA; lower tiers have none
No monthly price shown; paid plans start at $770 billed yearly

Pricing

Published plans from Ory’s own pricing page, in USD. Usage charges and add-ons may apply on top.

Ory pricing tiers, monthly rates in USD
Plan	Monthly	Includes
Developer	—	Free; 1 member, no production environments 2 development environments Password, passkeys, MFA and social sign-in Community support, 24h analytics history
Production	—per year	$770/year with $21 included monthly usage credit 1 production and 3 staging environments $0.14/aDAU/month, $0.007 per M2M token Custom domain, EU data storage, 7-day analytics
Growth	—per year	$9,350/year with $255 included monthly usage credit 2 production and 5 staging environments B2B SSO (OIDC only), up to 3 organisations Standard support, 30-day analytics history
Enterprise	Contact sales	99.99% uptime SLA and premium support One-click SAML SSO, SCIM and directory sync Multi-region deployments with data residency Multi-tenancy, event firehose, volume pricing
Ory Enterprise License	Contact sales	Self-hosted on-prem, private cloud or air-gapped Premium support with SLAs Custom pricing and legacy-system integrations

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 85 out of 100
API quality: 40 out of 100
Documentation: 80 out of 100
Agent friendliness: 95 out of 100
Pricing transparency: 85 out of 100
Changelog: 100 out of 100
Marketing site structure: 65 out of 100
Operational trust: 70 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 85 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Ory’s score

Alternatives in Identity & Access Management

Ranked 2
73.8 — BenchRank score out of 100
Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100
Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
Ranked 4
70.7 — BenchRank score out of 100
Better Auth
Better Auth · TypeScript authentication framework that runs inside your own app
Best for: TypeScript teams who want authentication defined in code rather than in a hosted provider's dashboard