oso makes authorization easy for developers and transparent for security.

POLICY AS CODE

Use a structured interface for expressing authorization with extensible building blocks, while keeping the flexibility to define whatever logic you need for your use case.

VISUALIZE

Explore the users, endpoints and every other element of your policy visually to reason about complex relationships, inform design decisions, and debug issues.

TEST & REVIEW

Write tests over your policy using frameworks like pytest or JUnit, and incorporate it into your security review process.

AUDIT

Get an audit trail of every request and permission change in your application, including output showing why requests were authorized or rejected.

Roles & Permissions

Add roles, groups, attributes, and user-configurable permissions to support the enterprise-grade features your customers ask for.

Custom Policies

Give your customers the ability to write custom rules and policies for your application – like your own version of AWS IAM.

Internal Apps

Provide fine-grained controls for your support and sales teams accessing customer data to meet compliance requirements and ensure a least-privilege security posture.