Kavach: A private identity service built on Ory
summary
Kavach is a private identity layer built on the Ory stack that uses Kratos and Keto under the hood with Oathkeeper as the proxy, deployed via Helm on Kubernetes. It delivers social login, API tokens, multi-tenancy with owner/member roles, and plans for MFA; simple apps work out of the box while publishing and visualization apps add entity-level policies directly to Keto. Two organizations run it now and an alpha release with docs is pending.
AI-written summary · about
chapters (7)
- 0:00Introduction to Kavach
- 5:16Why build Kavach
- 8:14Choosing Ory stack
- 13:32Kavach demo overview
- 17:59Demo login flow
- 19:23Advanced authorization
- 21:12Roadmap and future
related talks
25m Introducing the Ory Network
18mMake Auth great again with Ory
16mHow to move your RBAC into Ory 
19mHow TIER IV Replaced Identity Server with Ory
37mIdentity Bootstrapping in Multi-tenant Multi-cluster Kubernetes
18mRunning Ory on a 30M users platform
36mSecuring Agentic Platforms with Zero-Trust Workload Identities
31mVault and Secret Management in Kubernetes