PricingFree (self-hosted)Ory Network usage-basedCustom Enterprise
Free up to 1M MAUPay-as-you-go afterCustom Enterprise
SDK Languagesjavascripttypescriptpythongojavaphpruby
javascripttypescriptpythongorubyjava
Best ForSelf-hosted identity infrastructure with Kubernetes-native deployment; strong FGA via Keto (SpiceDB-compatible)
Enterprise SSO, M2M authentication, and fine-grained authorization for B2B agent products
LimitationsNo dedicated agent SDK; requires significant ops expertise to run at scale; no human-in-the-loop out of the box
No dedicated agent SDK; FGA is strong but relatively new; async authz patterns require custom integration