Build software better, together

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

kubernetes security distributed-systems database permissions acl authorization rbac cloud-native entitlements abac security-tools ciam fga fine-grained-access-control zanzibar fine-grained-authorization rebac

Updated Oct 6, 2026
Go

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

kubernetes golang security permissions acl grpc distributed authorization permission rbac cloud-native access-control abac ciam fga least-privilege fine-grained-access-control zanzibar rebac

Updated Oct 6, 2026
Go

openfga / openfga

Star

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

go golang security permissions authorization rbac entitlements access-control hacktoberfest abac fga pbac fine-grained-access-control zanzibar fine-grained-authorization rebac openfga

Updated Oct 6, 2026
Go

ory / keto

Star

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

permissions iam acl authorization rbac access-control hacktoberfest abac policy-management permission-management zanzibar rebac fine-grained-permissions relation-tuples

Updated Sep 4, 2026
Go

aserto-dev / topaz

Star

Cloud-native authorization for modern applications and APIs

api golang security authorization opa rbac cloud-native access-control abac zanzibar rebac

Updated Sep 30, 2026
Go

warrant-dev / warrant

Star

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

Updated Dec 5, 2025
Go

mkbhardwas12 / purposemesh

Star

Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.

typescript authorization rbac access-control abac zero-trust data-governance least-privilege policy-as-code rebac authzen purposemesh purpose-bound-access

Updated Sep 21, 2026
TypeScript

embesozzi / keycloak-openfga-workshop

Star

Keycloak integration with OpenFGA (based on Zanzibar) for Fine-Grained Authorization at Scale (ReBAC)

api oauth2 workshop keycloak api-gateway roles auth0 authorization okta access-management user-identity apisix zanzibar fine-grained-authorization rebac openfga

Updated Jul 12, 2024
JavaScript

openfga / go-sdk

Star

OpenFGA SDK for Go.

go golang security sdk permissions authorization access-control hacktoberfest fga zanzibar fine-grained-authorization rebac openfga openfga-client

Updated Oct 6, 2026
Go

syzygyhack / open-foundry

Star

open-source ontology platform for operational digital twins

graphql typescript postgresql ontology authorization knowledge-graph fhir data-governance digital-twin apache-age rebac openfga

Updated Oct 4, 2026
TypeScript

openfga / cli

Star

A cross-platform CLI to interact with an OpenFGA server.

go cli security permissions authorization access-control hacktoberfest fga zanzibar fine-grained-authorization rebac openfga openfga-client

Updated Oct 6, 2026
Go

uatuko / ruek

Sponsor

Star

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

cmake grpc authorization rbac access-control abac fga zero-trust cpp20 least-privilege zanzibar fine-grained-authorization rebac

Updated Feb 14, 2026
C++

pthm / melange

Star

OpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.

database postgresql permissions authorization rbac fga zanzibar fine-grained-authorization rebac openfga

Updated Sep 7, 2026
Go

theronic / eacl

Star

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.