Ory Corp
Ory Corp is an API-first, open-source-based identity and access management (IAM) company founded in 2019, serving developers, enterprises, and AI agent platforms with modular identity, authorization, permissions, and SSO products delivered as open source, self-hosted enterprise, or managed SaaS.
- Company typePrivate
- Founded2019
- HeadquartersScottsdale, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Ory Corp does
Ory Corp is a Delaware-incorporated identity and access management (IAM) company founded in 2019 and headquartered in Scottsdale, USA. It provides a modular, API-first IAM platform delivered through three deployment models: Apache 2.0 open source, the self-hosted Ory Enterprise License (OEL), and the fully managed Ory Network SaaS. The platform consists of composable building blocks — Ory Kratos for identity and user management, Ory Hydra for OAuth 2.0/OpenID Connect authorization, Ory Keto for Zanzibar-based fine-grained permissions, Ory Polis for B2B federation and enterprise SSO, Ory Oathkeeper for Zero Trust identity-aware proxying, and Ory Talos for non-human identity API key management. Newer modules (Ory Agent Security, Ory Agent DX, Ory MCP Server) extend the platform to AI coding agents and Model Context Protocol governance. Headcount is 11–50 employees.
Ory serves developers and engineering teams at customer- and partner-facing applications, B2B SaaS companies, AI/agent platforms, and regulated enterprises — notably OpenAI (800M weekly active users), Fandom, Axel Springer, Societe Generale, T. Rowe Price, Mistral AI, Hemnet, and Lumin. The company monetizes through tiered SaaS subscriptions ($770/year Production to custom Enterprise) with usage-based components (per aDAU, M2M token, and permission check), enterprise self-hosted licensing, and freemium open source as top-of-funnel. GTM combines product-led growth (free tier, console.ory.com self-signup, GitHub/Slack community, 48K GitHub stars, 685M Docker pulls) with enterprise field sales focused on identity modernization and migration from Auth0/Okta, plus channel partnerships with Tetrate and HID.
Operationally, Ory has raised approximately $27.5M to date ($22.5M Series A led by Insight Partners in December 2021, plus a ~$5M exempt offering in April 2024 with Balderton Capital and Insight participating), was bootstrapped before the Series A, and operates across Europe, North America, and Japan with multi-region infrastructure. The company holds SOC 2 Type 2 and ISO 27001:2022 certifications, is OpenID Certified, GDPR-compliant with EU data residency, and is undergoing PCI-DSS certification. Disclosed 2025 ARR is $2.2M against a stated $6.6M valuation, with 2.5 billion identities managed across the platform as of April 2026.
Ory Corp firmographics
Firmographics- Name
- Ory Corp
- Legal name
- Ory Corp
- Website
- https://ory.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Ory Corp is an API-first, open-source-based identity and access management (IAM) company founded in 2019, serving developers, enterprises, and AI agent platforms with modular identity, authorization, permissions, and SSO products delivered as open source, self-hosted enterprise, or managed SaaS.
- Ownership category
- akta.pro rank
Ory Corp industry classification
Industry- Product category
- Identity and Access Management (IAM)
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB)
- akta.pro secondary industries
- Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF), Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG), Machine & Workload Identity (PKI, Certificates, Service Accounts) (HDADAAAH), Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
Keywords
Where Ory Corp is headquartered
LocationHeadquarters
- HQ city
- Scottsdale
- HQ country
- United States
- HQ region
- North America
Markets served
Ory Corp business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Ory Network SaaS Subscriptions: Fully managed cloud IAM delivered as SaaS with tiered subscription plans (Production, Growth, Enterprise). Billed annually with usage-based components for aDAU, M2M tokens, and permission checks.
- Ory Enterprise License (OEL): Commercial self-hosted edition providing enterprise builds, 24x7 support, SLA-backed CVE patching, and enterprise-only features. Licensed on a per-product subscription basis.
- Open Source (Community): Apache 2.0 licensed open-source components (Kratos, Hydra, Keto, Polis, Oathkeeper, Talos) available at no cost. Serves as top-of-funnel for commercial tier conversions.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Developer Free Tier |
| Subscription | Annual | Ory Network Production ($770/year) |
| Subscription | Annual | Ory Network Growth ($9,350/year) |
| Subscription | Multi-year contract | Ory Network Enterprise (Custom) |
| Subscription | Multi-year contract | Ory Enterprise License (OEL) |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels10 records
Ory Corp product offering
Product offeringCore offering
Ory Corp provides a modular, API-first identity and access management (IAM) platform composed of identity (Kratos), authorization (Hydra), permissions (Keto), B2B federation (Polis), zero-trust proxy (Oathkeeper), secure API keys (Talos), and AI-agent identity components (Agent Security, Agent DX, MCP Server). The platform is delivered as Apache 2.0 open source, a self-hosted commercial Ory Enterprise License, or a fully managed Ory Network SaaS, and is built on open standards including OAuth 2.0, OpenID Connect, WebAuthn, FIDO2, SAML, and SCIM.
Product overview
Ory Corp provides a modular, API-first identity and access management platform deployed across three models: fully-managed cloud (Ory Network), self-hosted commercial (Ory Enterprise License), and open-source (Apache 2.0). The platform consists of composable building blocks: Ory Kratos handles identity and user management; Ory Hydra provides OAuth 2.0 and OpenID Connect authorization; Ory Keto delivers fine-grained Zanzibar-based permissions; Ory Polis enables B2B federation and enterprise SSO; Ory Oathkeeper serves as the Zero Trust identity-aware proxy; and Ory Talos secures API keys for non-human identities. Recent additions include Ory Agent Security and Ory Agent DX for AI agent identity management, plus the Ory MCP Server for Model Context Protocol integration.
Differentiator
Problem solved
Functional benefit
Brands
- Ory Kratos: Cloud-native identity and user management system for authentication, MFA, and social login.
- Ory Hydra
- Ory Keto
- Ory Oathkeeper
- Ory Polis
- Ory Talos
- Ory Network
- Ory Enterprise License
- Ory Agent Security
- Ory Agent DX
Products and services
- Ory Network Fully-managed cloud IAM platform delivering identity infrastructure as a SaaS service with tiered subscriptions (Production, Growth, Enterprise), usage-based metering, and 99.99% SLA. Targets developers, startups, mid-market, and enterprises needing zero operational overhead.
- Ory Enterprise License (OEL) Self-hosted commercial edition of Ory components for mission-critical production environments requiring data sovereignty, air-gapped deployment, or full infrastructure control. Includes 24x7 SLA support, CVE patching, enterprise builds, Helm charts, and enterprise-only features (B2B Organizations, SAML, SCIM).
- Ory Open Source Apache 2.0 licensed open-source IAM components (Kratos, Hydra, Keto, Oathkeeper, Polis, Talos) for self-hosted deployment with modular building blocks for authentication, authorization, and user management and community-driven support.
- Ory Agent Security Security plane for AI coding agents (Claude Code, Codex, Gemini CLI) providing authentication, authorization, and audit for agentic workflows. Enforces fine-grained permissions on shell commands, file writes, MCP tools, server connections, and downstream API calls, with audit logs for compliance.
- Ory Agent DX Free developer toolkit with plugins for Claude Code, OpenAI Codex, and Gemini CLI that integrates Ory's identity management into AI coding agents so developers can build, test, and manage authentication and authorization workflows within their development environments.
Quantifiable outcome
- Ory Network processes billions of authentications per week with 99.99% availability SLA
- +5 more outcomes
Companies that use Ory Corp
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles4 records
Ory Corp technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability6 records
Feature12 records
Ory Corp partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core and minor.
- TetratecoreJoint AI agent security partnership combining Ory's authorization engine with Tetrate Agent Router Enterprise to provide policy enforcement at the point of live MCP tool calls. Ory handles resource-level authorization while Tetrate enforces network traffic controls. Grew out of an existing customer relationship where Ory deployed Tetrate Enterprise Gateway for Envoy, reportedly cutting resource use by 40%. The combined solution is generally available as of June 2026.
- HIDcoreStrategic partnership to deliver the first enterprise FIDO2-based identity platform converging physical and digital access under a single credential strategy. Combines HID's global physical access infrastructure with Ory's identity platform managing over 2 billion identities. Targets large enterprises in regulated sectors including financial services. Joint offering expected to be available in Q2 2026, with early adopter programs already underway.
- Enterprise Management Associates (EMA)minorOry commissioned EMA to conduct a global survey of 271 IT and security professionals on AI adoption and IAM readiness in the financial sector, producing research highlighting how legacy IAM systems slow AI adoption. Findings published in May 2026.
Scale indicators11 records
Recent moves6 records
Expansion highlights6 records
Ory Corp competitors and assessment
Company assessmentBroad incumbents
- AWS Cognito: AWS Cognito provides developer-oriented identity for AWS-centric applications with deep cloud integration. Ory competes by offering cloud-agnostic IAM with open standards and consistent behavior across regions and providers.
- Okta: Okta is a leader in workforce and customer identity with a broad enterprise IAM portfolio. Ory competes by offering an open-source, API-first alternative that avoids Okta's UI-centric, proprietary lock-in model.
- Microsoft Entra ID (Azure AD): Microsoft Entra ID is the bundled identity layer for Microsoft 365 and Azure, with massive enterprise footprint. Ory competes by offering open, multi-cloud, vendor-neutral IAM for organizations avoiding Microsoft lock-in.
Direct peers
- Keycloak (Red Hat): Keycloak is an open-source IAM platform under CNF/Red Hat, offering SSO, identity brokering, and user federation. Ory competes with Keycloak at the open-source IAM layer with a more modular, API-first, and headless architecture.
- Auth0 (Okta): Auth0 is the most directly comparable CIAM platform, offering OAuth2/OIDC, SSO, MFA, and universal login. Ory explicitly positions against Auth0 with a headless, open-source architecture and migration tooling aimed at Auth0 customers.
- Ping Identity: Ping Identity provides enterprise SSO, federation, and CIAM with deep financial-services penetration. Ory is mentioned in direct head-to-head comparison content, and Ping is a competitor for regulated-sector enterprise deals.
- Stytch: Stytch provides passwordless authentication, MFA, and CIAM APIs aimed at developers. Both Ory and Stytch compete for developer-led CIAM adoption with API-first identity offerings.
- WorkOS: WorkOS focuses on B2B SSO, SAML/OIDC, SCIM, and enterprise readiness for SaaS developers. Both Ory and WorkOS compete for the same B2B IAM buyer with API-first, developer-friendly offerings.
Emerging players
- Frontegg: Frontegg offers a developer-first identity and user management platform with B2B and enterprise features. Both Ory and Frontegg target modern SaaS and B2B teams seeking CIAM with flexible extensibility.
- SuperTokens: SuperTokens is an open-source authentication platform providing session management, SSO, and passwordless options. Ory competes with SuperTokens in the open-source CIAM category for engineering-led adoption.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Ory Corp social profiles
Digital presenceOry Corp compliance and trust
Trust signalCompliance6 records
Ory Corp financial estimates
Financial estimateRevenue estimate
Valuation estimate
Ory Corp leadership team
Management profileNumber of profiles
Profiles4 records
Ory Corp funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Ory Corp M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Ory Corp
What does Ory Corp do?
Ory Corp provides a modular, API-first identity and access management (IAM) platform composed of identity (Kratos), authorization (Hydra), permissions (Keto), B2B federation (Polis), zero-trust proxy (Oathkeeper), secure API keys (Talos), and AI-agent identity components (Agent Security, Agent DX, MCP Server). The platform is delivered as Apache 2.0 open source, a self-hosted commercial Ory Enterprise License, or a fully managed Ory Network SaaS, and is built on open standards including OAuth 2.0, OpenID Connect, WebAuthn, FIDO2, SAML, and SCIM.
Is Ory Corp a public or private company?
Ory Corp is a private company. It is classified as venture growth investor backed and is currently operating.
When was Ory Corp founded?
Ory Corp was founded in 2019. It employs 11 to 50 people.
Where is Ory Corp based?
Ory Corp is headquartered in Scottsdale, United States, in the North America region.
How does Ory Corp make money?
Three revenue lines are on record. Ory Network SaaS Subscriptions are the primary driver. The others are ory Enterprise License (OEL) and open Source (Community).
Who are Ory Corp's main competitors?
Broad incumbents on record are AWS Cognito, Okta and Microsoft Entra ID (Azure AD). Direct peers are Keycloak (Red Hat), Auth0 (Okta), Ping Identity, Stytch and WorkOS. Emerging players are Frontegg and SuperTokens.
Does Ory Corp have an API?
Yes. Ory provides a comprehensive API-first platform with REST and gRPC APIs for authentication, authorization, and user management. The platform includes OAuth 2.0 and OpenID Connect support, webhook capabilities for lifecycle events, and extensive SDKs across multiple languages including Node.js, Python, Java, .NET, PHP, Ruby, and Go. Ory also provides an MCP Server for Model Context Protocol integration, enabling AI agents to interact with Ory's identity and authorization infrastructure. Developer documentation is at www.ory.com/docs/welcome.
What industry is Ory Corp in?
Ory Corp's product category is Identity and Access Management (IAM). Its primary akta.pro industry code is HDAEAJAB, Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers), with a secondary code of HDABAHAF, Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA). Its NAICS code is 5182 and its SIC code is 7372.