ForgeRock Identity PlatformvsOry Oathkeeper

Pros

Cons

Pros

• It is an identity and access proxy that enforces authorization policies, providing a centralized way to secure APIs and microservices.
• It integrates with the broader Ory ecosystem (e.g., Ory Keto for permissions) to offer a complete identity and access management solution.
• As a proxy, it can be deployed in front of existing services to add a security layer without requiring changes to the application code.

Cons

• A critical security vulnerability (CVE-2026-33494) was recently discovered in Ory Oathkeeper. The vulnerability is a path traversal authorization bypass that could allow attackers to circumvent security controls .
• The existence of this vulnerability means users must urgently update to the patched version to secure their applications. It highlights a potential weakness in previous versions .
• Like other security tools, it requires careful configuration and integration to ensure it is correctly enforcing policies and not inadvertently blocking legitimate traffic.