Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Identity, secrets management, application security and privacy compliance.
Authentication, SSO, directories and authorisation.
Ranked 1
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
Storing, rotating and distributing credentials.
Ranked 1
Infisical · Secrets, certificate and privileged access management for developers
Best for: Engineering teams wanting secrets, certificates and privileged access managed on one platform
Ranked 2
UnKey · API deployment, gateway and observability on one platform
Best for: Teams that want API deployment, key auth, rate limiting and logs from a single vendor
Ranked 3
Bitwarden · Open source credential manager for people, AI agents and machines
Best for: Businesses wanting an open source, self-hostable password manager with SSO, SCIM and event logs
Dependency scanning, SAST, secrets detection and runtime protection.
Ranked 1
Sentry · Error tracking and application performance monitoring for developers
Best for: Development teams wanting error monitoring, tracing and session replay tied to one trace
Ranked 2
GrowthBook · Warehouse-native feature flags, experimentation and product analytics
Best for: Product and engineering teams running feature flags and experiments on their own data warehouse.
Ranked 3
Temps · Self-hosted deploy platform with built-in analytics, errors and monitoring
Best for: Teams self-hosting deployments who also want analytics, error tracking and uptime on their own server
Consent, data mapping, audits and compliance automation.
Ranked 1
c15t · Open source consent management and script loading for web apps
Best for: Development teams that want a code-controlled cookie consent banner in modern web apps
Ranked 2
Probo · Open-source compliance platform with compliance officers who run the programme
Best for: Startups needing SOC 2, ISO or HIPAA certification without running a compliance programme in-house.
Ranked 3
Comp AI · Automated SOC 2, ISO 27001, HIPAA and GDPR compliance
Best for: Startups and growing companies automating SOC 2, ISO 27001, HIPAA or GDPR evidence work