compare
Open Policy Agent vs Topaz
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Open Policy Agent | Topaz |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 12k | 1.4k |
| Latest | v1.21.2 | v0.33.22 |
| Last push | 2026-10-17 | 2026-10-14 |
| Release cadence | about 10 days between releases | about 7 days between releases |
| Active contributors | 32 commit authors on the default branch in the last 90 days | 2 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace AWS Verified Permissions. Alternatives to AWS Verified Permissions →
PartialOpen Policy AgentGeneral-purpose policy engine with the Rego language, not limited to application permissions.
PartialTopazFine-grained authorization combining OPA policies with a Zanzibar-style relationship store, self-hosted.
Open Policy Agent
- v1.21.22026-10-12This release builds the OPA binary artifacts with the latest version of Go (v1.27.2), its standard library, and the gol…
- v1.21.12026-09-29This release fixes a compiler regression introduced in OPA v1.21.0.
- v1.21.02026-09-24This release contains a mix of new features and bug fixes. Notably:
- v1.20.22026-09-03This release includes a bug fix for a parser regression introduced in v1.20.0, and dependency updates.
- v1.20.12026-08-28This release includes a bug fix for a regression introduced in v1.20.0 in
Open Policy Agent
unsigned The latest release, v1.21.2, carries no signature GitHub could verify.
Loading the security report
Topaz
✓ signed The latest release, v0.33.22, carries a signature GitHub verified.
Loading the security report