Top 20 Go access-control Projects

access-control

• Add a project

1. casbin

   1 41 20,412 8.0 Go

   Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

   

   Project mention: Permission Systems for Enterprise That Scale | news.ycombinator.com | 2025-12-24

   Worth mentioning Casbin as well (https://github.com/casbin/casbin) - it's been around for a while and takes a slightly different approach. Instead of being purely Zanzibar-inspired, it uses a PERM (Policy, Effect, Request, Matchers) metamodel that lets you implement RBAC, ABAC, or ReBAC depending on what fits your use case.

2. AppSignal

   www.appsignal.com sponsored

   Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

   

3. permify

   2 48 5,962 9.5 Go

   An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

   

   Project mention: We Built an Authorization Engine That the Fortune 100 Bet On | news.ycombinator.com | 2026-05-02

   We've had community members bring this up[0].

   While there are a variety of approaches, currently our recommended solution is to use the Watch API[1] to create Leopard-style (matrix) indexes in the client’s database to enable efficient permission filtering using schema and YAML-based index definitions.

   We started down the path of building an example watch consumer[2] but both the team and the interested community members were pulled off it for reasons, but not for technical ones.

   This FAQ may be helpful to learn more about leopard indexes[3].

   0: https://github.com/Permify/permify/issues/2681

   1: https://fusionauth.io/permify-docs/api-reference/watch/watch...

   2: https://github.com/Permify/indexer

   3: http://nil.csail.mit.edu/6.5840/2023/papers/zanzibar-faq.txt

4. Ory Keto

   3 37 5,407 9.2 Go

   The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

   

   Project mention: Permission Systems for Enterprise That Scale | news.ycombinator.com | 2025-12-24

5. cerbos

   4 47 4,609 9.6 Go

   Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

   

   Project mention: cerbos VS onequery - a user suggested alternative | libhunt.com/r/cerbos | 2026-06-01

6. Ory Oathkeeper

   5 4 3,609 9.3 Go

   A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

   

7. caddy-security

   6 18 2,248 9.1 Go

   🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

   

   Project mention: One login to rule them all: centralized auth for internal tools with Caddy | dev.to | 2026-07-20

   Caddy-security (also known as AuthCrunch) for authentication and authorization. It plugs directly into Caddy and adds an authentication portal with OAuth2/OIDC support.

8. topaz

   7 9 1,363 8.6 Go

   Cloud-native authorization for modern applications and APIs (by aserto-dev)

   

9. SaaSHub

   www.saashub.com sponsored

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

10. warrant

    8 42 1,338 2.5 Go

    Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

    

    Project mention: Permission Systems for Enterprise That Scale | news.ycombinator.com | 2025-12-24

11. rbac-tool

    9 9 1,081 4.1 Go

    Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

    

12. gittuf

    10 5 667 9.6 Go

    A security layer for Git repositories

    

13. casbin-server

    11 3 338 0.0 Go

    Casbin as a Service (CaaS)

    

14. heimdall

    12 1 259 7.9 Go

    A cloud native Identity Aware Proxy and Access Control Decision service (by dadrus)

    

15. go-role

    13 2 218 0.0 Go

    Open source RBAC library. Associate users with roles and permissions.

    

16. restrict

    14 1 113 7.1 Go

    RBAC/ABAC authorization library for Go.

    

17. cli

    15 1 103 8.8 Go

    A cross-platform CLI to interact with an OpenFGA server (by openfga)

    

    Project mention: The Mystery of the Invisible Tab: A YAML Debugging Tale | dev.to | 2025-11-15

    That's why I opened an issue suggesting this improvement.

18. access-controller

    16 5 73 1.8 Go

    A highly scalable open-source implementation of an access-control engine inspired by Google Zanzibar-"Google’s Consistent, Global Authorization System"

    

19. orion-belt

    17 1 44 8.7 Go

    Self-hosted SSH/RDP access gateway with PAM workflows — reverse-tunnel agents, session recording, JIT approvals, and ReBAC. A lighter self-hosted alternative to the big zero-trust access platforms.

    

    Project mention: Orion Belt v1.0 — from Alpha bastion to a stable self-hosted SSH PAM | dev.to | 2026-07-16

    git clone https://github.com/orion-belt-dev/orion-belt.git cd orion-belt ./scripts/docker-quickstart.sh

20. casbin-json-adapter

    18 4 19 0.0 Go

    JSON adapter for Casbin

    

    Project mention: An authorization library that supports access control models like RBAC, ABAC | news.ycombinator.com | 2025-12-11

21. PermissionPanther

    19 2 10 1.8 Go

    Permissions for Killer Apps

    

22. poc-opa-access-control-system

    20 1 2 2.7 Go

    This is a repository for POC of access control infrastructure using open policy agent.

    

23. SaaSHub

    www.saashub.com sponsored

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    

Go access-control related posts

• Show HN: Feeding agents with session recording data

  1 project | news.ycombinator.com | 12 May 2026

• Show HN: We're using LLMs to classify risk before execution in prod

  1 project | news.ycombinator.com | 5 May 2026

• We Built an Authorization Engine That the Fortune 100 Bet On

  2 projects | news.ycombinator.com | 2 May 2026

• Show HN: Open-source control layer for AI safely access production

  1 project | news.ycombinator.com | 27 Apr 2026

• An authorization library that supports access control models like RBAC, ABAC

  1 project | news.ycombinator.com | 11 Dec 2025

• Casbin: An authorization library that supports authz models like ACL, RBAC, ABAC

  1 project | news.ycombinator.com | 29 May 2025

• 25+ Recently Launched GitHub Repositories for Developers.

  1 project | dev.to | 18 Jan 2025
• A note from our sponsor - SaaSHub
  www.saashub.com | 6 Oct 2026

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

Monitoring that respects your time & budget

APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

www.appsignal.com

Do not miss the trending Go projects with our weekly report!