Authorization designed for microservices

Oso is the “easy” button for authorization

Bob
is an
admin
on
Acme
Alice
is a
collaborator
on
Anvils
Anvils
belongs to
Acme
Roadmap
is public
too heavy!
belongs to
Anvils
too heavy!
was created by
Alice
Bob
can
delete
Anvils
Carol
can
read
Roadmap
Alice
cannot
delete
Anvils
Alice
can
read
too heavy!
Bob
can
close
too heavy!
Bob
can
read
Roadmap
Alice
can
close
too heavy!
Alice
can
read
Roadmap

Loved by Platform Engineering Teams

Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study
Case Study

One engine for all your authorization needs

Define powerful access logic, enforce it consistently, and scale it to any use case

Complex authz features made simple

Oso makes it easy to implement any permissions model, and supports advanced functionality like fine-grained access controls and user-defined roles.

Learn more

No more brittle authz code

Centralize your authorization data, policies, and enforcement to improve maintainability, increase feature velocity, and enhance your security posture.

Learn more

Connect user data to AI systems, safely

Propagate and enforce user permissions across RAG pipelines and agentic systems to ensure data leaks are a thing of the past.

Learn more

Not sure where to start?

See our resources page for step-by-step guides and expert advice to help you navigate authorization with confidence.

Best practices for authorization in microservices

Read our recommendations for the best patterns for handling
authorization data in microservices.

Technical guides for building application authorization

Read a series of technical guides that explains how to build authorization into your app, including architecture, modeling patterns, enforcement, and more — whether you use Oso or not.

Loved by Developers

Amazon

“I'm sold on this way ahead for the known future. Oso has nailed the abstractions.That’s the hardest part to get right, and the hardest part to change later.”

Will Flynt
Principal Engineer, Amazon
Duolingo

“Oso is a compelling fit because of their singular focus on authz, plus the flexibility of their Polar rule definitions. Within twenty minutes we’d managed to define a custom Polar definition to handle our current use case."

Evan Ziebart
Engineer, Duolingo
Wayfair

“We needed to manage authorization across all of our new microservices. The answer was the Oso authorization framework."

Nicholas Matison
Senior Engineer, Wayfair
Intercom

“Oso is A+. As we moved upmarket, being able to implement authz consistently and accurately helped us move faster and resolved a never-ending source of bugs.”

Brian Scanlan
Engineer, Intercom
Productboard

“We reviewed multiple solutions – Oso came out on top for its devex, scalable and consistent performance, and the flexibility to match all our needs.”

Jiří Brunclík
VP Engineering, Productboard
Oyster HR

“It used to take us months to add new roles. With Oso we cut that time 10x. The Oso team has also been very helpful, making our migration super smooth.”

Derick Matamoros
Lead Engineer, Oyster HR
Arc

“Oso has been huge for us. It has the most intuitive model. It’s the most mature, and has the best tooling and docs. And the support has been unreal.”

Raven Jiang
CTO, Arc
Fiddler

“Oso was the fastest path to building roles and has been incredible – easy to wrap our heads around, great docs, and makes life much simpler.”

KC Chintalapati
Engineer, Fiddler
Tamr

"We were able to build and deploy a sample app with Oso in an afternoon versus several days for the others. It was significantly faster to get started out of the box."

Nick Laferriere
Head of Engineering, Tamr

Let's see some code.