Ory
by Ory · API-first identity and access management, self-hosted or managed
BenchRank score
Screenshots of Ory
Homepage
Overview
Ory is an identity and access management platform covering customer login, B2B single sign-on, and machine and AI-agent identity. It is API-first and headless, split into components for identities (Kratos), OAuth2 (Hydra), permissions (Keto) and B2B federation (Polis). Run it as open source, self-hosted under an enterprise licence, or as the managed Ory Network.
- Best for
- Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
- Pricing
- Free Developer tier, then Ory Network Production at $770/year and Growth at $9,350/year plus usage charges (from $0.14 per aDAU/month), with Enterprise and the self-hosted Enterprise License priced on request.
- Runs on
- WebSelf-hostedCLI
Strengths and trade-offs
Strengths
- Runs open source, self-hosted, or as managed Ory Network
- Headless and API-first, so you own the login UI
- Per-unit prices published for users, tokens and permission checks
- Passkeys, MFA and OpenID-certified OIDC on every tier
Trade-offs
- SAML SSO, SCIM and directory sync are Enterprise-only
- B2B organisations start at Growth and are capped at 3
- Only Enterprise carries an SLA; lower tiers have none
- No monthly price shown; paid plans start at $770 billed yearly
How Ory markets itself
A structured read of the promise, proof and page design on Ory’s captured homepage.
Homepage capture
“Every agent. Every action. One control plane.”
- Angle: AI-native
- Hero: Product video demo
Pricing
Published plans and prices from Ory’s own pricing page.
How this score is made up
Each dimension is scored out of 100 and combined into the headline score using fixed weights.
MCP support
Whether an agent can drive the product through the Model Context Protocol, and how much setup that takes.
API quality
Public API surface: machine-readable spec, official SDKs, documented auth, errors, rate limits and versioning.
Documentation
Publicly reachable docs — coverage, freshness, code samples and machine readability.
Agent friendliness
How readable the site is to an automated client: llms.txt, structured data, server-rendered content, crawler access.
Pricing transparency
Whether real prices are published, self-serve signup exists, and usage costs are knowable without a sales call.
Changelog
A public, dated record of what shipped and when — the clearest signal that a product is still alive.
Marketing site structure
Whether the site answers a buyer's questions: clear positioning, the pages that matter, and accessibility.
Page speed
How fast the site loads for real visitors: Chrome UX Report 75th-percentile LCP, INP and CLS, with a Lighthouse mobile run standing in where a site has too little traffic for field data.
Operational trust
Status page and incident history, security disclosure, compliance and data-processing documentation.
Measured, but not part of the score
Useful to know, but not a mark for or against the product — so these do not affect the ranking.
Openness
Source availability, self-hosting, data export and open standards. Scored and shown, but not part of the composite — paid SaaS is not worse for being paid SaaS.
Maintenance
Release cadence and repository activity. Scored and shown, but not part of the composite — it is only measurable for open repositories.
Where this comes from
The Ory pages BenchRank reads when it scores the product — its documentation, release notes, status and security pages, and its repository where there is one.
Alternatives in Identity & Access Management
Ranked 2
73.9 — BenchRank score out of 100Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
70.9 — BenchRank score out of 100Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
Ranked 4
70.8 — BenchRank score out of 100Hanko
Hanko · Open-source authentication and user management with passkeys
Best for: Developer teams wanting open-source passkey and MFA authentication with EU hosting or self-hosting
Is this your product?
Claim Ory to manage its profile. Claiming lets you suggest edits to the descriptive fields — it never changes scores or rankings.