Open Policy Agent (OPA) is an open source, general-purpose policy engine.
General-purpose policy engine with the Rego language, not limited to application permissions.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 12k
- Latest
- v1.21.2
- Last push
- 2026-10-17
alternatives to
AWS Verified Permissions
Amazon's managed authorization service, which evaluates application permissions written as Cedar policies. A closed product from Amazon Web Services.
Open Policy Agent, SpiceDB, OpenFGA and more. 6 alternatives to AWS Verified Permissions, in Go. Compare fit, licence, stars and the latest signed release.
Side by side
| Tool | Fit | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|---|
| Open Policy Agent | Partial | 12k | Apache-2.0 | Open source | Yes | Go | v1.21.2 | 2026-10-17 |
| SpiceDB | Partial | 7.2k | Apache-2.0 | Open source | Yes | Go | v1.56.2 | 2026-10-18 |
| OpenFGA | Partial | 6k | Apache-2.0 | Open source | Yes | Go | v1.22.0 | 2026-10-18 |
| Permify | Partial | 6k | AGPL-3.0 | Open source | Yes | Go | v1.7.5 | 2026-10-15 |
| Cerbos | Partial | 4.6k | Apache-2.0 | Open source | Yes | Go | v0.56.0 | 2026-10-19 |
| Topaz | Partial | 1.4k | Apache-2.0 | Open source | Yes | Go | v0.33.22 | 2026-10-14 |
Every alternative
6 alternatives
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Zanzibar-style relationship checks instead of Cedar policies, run on your own infrastructure.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 7.2k
- Latest
- v1.56.2
- Last push
- 2026-10-18
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Zanzibar-style relationship checks instead of Cedar policies, hosted on your own infrastructure.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 6k
- Latest
- v1.22.0
- Last push
- 2026-10-18
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Relationship-based checks with its own schema language rather than Cedar.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Policy-based RBAC and ABAC written in YAML and evaluated by a service you run; open core.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 4.6k
- Latest
- v0.56.0
- Last push
- 2026-10-19
Cloud-native authorization for modern applications and APIs
Fine-grained authorization combining OPA policies with a Zanzibar-style relationship store, self-hosted.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 1.4k
- Latest
- v0.33.22
- Last push
- 2026-10-14
Head to head
- Cerbos vs Open Policy Agent
- Cerbos vs OpenFGA
- Cerbos vs Permify
- Cerbos vs SpiceDB
- Cerbos vs Topaz
- Open Policy Agent vs OpenFGA
- Open Policy Agent vs Permify
- Open Policy Agent vs SpiceDB
- Open Policy Agent vs Topaz
- OpenFGA vs Permify
- OpenFGA vs SpiceDB
- OpenFGA vs Topaz
- Permify vs SpiceDB
- Permify vs Topaz
- SpiceDB vs Topaz
About AWS Verified Permissions
- Vendor
- Amazon Web Services