Amazon's managed authorization service, which evaluates application permissions written as Cedar policies. Un producto cerrado de Amazon Web Services.
Open Policy Agent, SpiceDB, OpenFGA y otras. 6 alternativas a AWS Verified Permissions, en Go. Compara el nivel de sustitución, la licencia, las estrellas y la última versión firmada.
| Herramienta | Sustitución | Estrellas | Licencia | Condiciones | Autoalojable | Lenguaje | Última versión | Último push |
|---|---|---|---|---|---|---|---|---|
| Open Policy Agent | Parcial | 12k | Apache-2.0 | Código abierto | Sí | Go | v1.21.2 | 2026-10-17 |
| SpiceDB | Parcial | 7.2k | Apache-2.0 | Código abierto | Sí | Go | v1.56.2 | 2026-10-18 |
| OpenFGA | Parcial | 6k | Apache-2.0 | Código abierto | Sí | Go | v1.22.0 | 2026-10-18 |
| Permify | Parcial | 6k | AGPL-3.0 | Código abierto | Sí | Go | v1.7.5 | 2026-10-15 |
| Cerbos | Parcial | 4.6k | Apache-2.0 | Código abierto | Sí | Go | v0.56.0 | 2026-10-19 |
| Topaz | Parcial | 1.4k | Apache-2.0 | Código abierto | Sí | Go | v0.33.22 | 2026-10-14 |
6 alternativas
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
General-purpose policy engine with the Rego language, not limited to application permissions.
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Zanzibar-style relationship checks instead of Cedar policies, run on your own infrastructure.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Zanzibar-style relationship checks instead of Cedar policies, hosted on your own infrastructure.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Relationship-based checks with its own schema language rather than Cedar.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Policy-based RBAC and ABAC written in YAML and evaluated by a service you run; open core.
Cloud-native authorization for modern applications and APIs
Fine-grained authorization combining OPA policies with a Zanzibar-style relationship store, self-hosted.