Open source alternative to WorkOS FGA, Permit.io, Cerbos and Auth0
Last verified
Secure authorization with an open source service for RBAC, ABAC, and ReBAC checks across SaaS apps, internal tools, and shared APIs.
Warrant fits products that need organization-level roles, feature access by plan, and resource-level sharing in one authorization model.
You only need a few hardcoded roles inside a single application.
Centralizing checks helps teams control who can view or change sensitive operational data across admin panels, scripts, and support tooling.
Your internal tools can rely on a simple network boundary or manual approvals.
The project is useful when developers want to test or extend a relationship-based authorization service before buying or standardizing on a managed platform.
You need a fully managed service with high-scale guarantees out of the box.
Authorization logic becomes hard to trust when roles, entitlements, and object permissions are implemented separately in each service. Teams end up debugging inconsistent rules, duplicating audit logic, and shipping brittle access checks.
A centralized authorization service reduces that drift. Warrant gives developers one place to model access rules, evaluate checks, and audit permission changes while still supporting tenant-specific and resource-level policies.
Warrant exposes HTTP APIs for defining roles, permissions, features, tenants, users, and access rules from application code or operational tooling.
The service is built around a Zanzibar-style relationship model that can represent RBAC, ABAC, and ReBAC without splitting authorization logic across separate systems.
The open source project documents local source builds and container-based deployment options, with MySQL, PostgreSQL, and SQLite support.
Self-host Warrant locally from source:
```bash
git clone https://github.com/warrant-dev/warrant.git
cd warrant/cmd/warrant
make dev
./bin/warrant
```
For container-based setups, the repo also includes Docker deployment examples for MySQL and PostgreSQL.Warrant is an open source fine-grained authorization service for defining, checking, and auditing application access rules.
The project docs describe local builds from source plus deployment examples for Docker-based setups with MySQL or PostgreSQL.
Warrant is a better fit when your team wants source access and self-hosting control. Hosted tools reduce operational work and may be a better choice for very high-throughput or fully managed requirements.
Alternative to
Permit.io
Open source authorization with RBAC, ABAC, and ReBAC for any app
Alternative to
Zenity
Runtime guardrails that gate every AI agent tool call
Alternative to
Auth0
Multi-tenant auth platform with SSO, RBAC, and social login
Alternative toAuth0
Open source identity platform with SSO, RBAC, and multi-tenancy
Alternative to
Clerk
Drop-in TypeScript auth with MFA, SSO, and multi-tenancy support
Run Warrant on your own server
Self-host Warrant on a Hostinger VPS.
Deploy on HostingerFeatured
Alternative to
Grok Bot
AI teammates you own: your keys, your model, your machine.
Alternative toClaude Managed Agents
Open-source agent deployment API. Self-host or use Omnara Cloud.
Alternative to
Superhuman
AI email assistant that drafts replies and clears your inbox
The projects we add and every new guide. Free, unsubscribe any time.
Claude Code to 
OpenCode
Jira to 
Windshift
Notion to 
AppFlowy
Slack to 
Mattermost
Linear to 
GitLab
Wispr Flow to 
Handy
CapCut to 
Concat
Grok Bot to 
rakazo
Superhuman to 
Inbox Zero
Airtable to 
AITable
Muse to 
OpenClaw
GitHub Copilot to 
Cline
Datadog to 
Netdata
Microsoft Teams to 
Rocket.ChatConfluence to 
Docmost
Pinecone to 
Qdrant
Zapier to 
n8n
Devin AI to 
OpenHands
Firebase to 
Supabase
1Password to 
KeePassXC
Contentful to 
Strapi
Adobe Premiere Pro to 
Shotcut
ChatGPT to 
AnythingLLM
LangSmith to 
Langfuse
