Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #7281

P

Permify

Company blog · permify.co/post · on HN as mtolgaprogrammingsecurity

Permify is the company blog at permify.co, writing about programming and security. Since 2021, 11 different Hacker News readers have linked it 35 times, most often “What's make authorization hard, and how to get it right”. No feed was found, so read it on the site itself.

No feed foundVisit the blog
35mentions?
11HN people?
2021–2026first – last linked?
Links on Hacker News per year · peak 16 in 2022

Too few sampled comments (5) to say how often HN recommends it.?

Why HN links it

Linked for Permify, an open-source authorization service and policy engine based on Google Zanzibar. Comments are mostly launch threads and founder introductions, and none judge the writing.

Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Permify, is an open-source authorization service for building scalable and fine-grained authorization.

The author on HN?

mtolga · 25 karma · member since 2020

Co-founder of Permify permify.co tolga@permify.co

From their public HN profile, which links to this site.

Most-linked posts?

  1. What's make authorization hard, and how to get it right
    3 people · 6 mentions · first linked 2022-07-01
  2. Google Zanzibar in a Nutshell
    3 people · 3 mentions · first linked 2023-11-16
  3. Google Zanzibar in a Nutshell
    2 people · 2 mentions · first linked 2022-10-18

What Hacker News says?

  1. Hey Jimmy, I'm Tolga one of the co-founders of Permify. Lovely to be in the space. Thanks for the kind words we're always open to chat as well. Right there things we have to improve such as data consistency as you mentioned. We'll be following Zookie model. And we will be adding message queue, and planning to add a message broker soon. You can check this article for more: https://www.permify.co/post/why-decouple-aut…

    Comment linking /post/why-decouple-authorizations

    on “Show HN: Permify – Open-source authorization service based on Google Zanzibar”
  2. Submitted Top Open Source Authorization Libraries (2024) as a story · 18 points

    HN discussion
  3. Hey HN! Ege from Permify here. Permify is an open-source authorization service and policy engine based on Google-Zanzibar[0] with our own twist. Me and my co-founders have known each other for years since high school. And we love building things. We have both worked with fortune 500 companies to small businesses [1], and every authorization system was unique. Yet we always tackle the same problems. - Modeling the au…

    Comment linking /post/why-decouple-authorizations

    on “Show HN: Permify – Open-source authorization service based on Google Zanzibar”
  4. Submitted Show HN: Permify Open-source Authorization Service V2 is out as a story · 12 points

    HN discussion
  5. >Because, on day zero, if my options are "the 2 minute solution" or "spend hours/days/weeks? evaluating a vendor for a problem I won't have for years"... well, the choice seems pretty clear there. This is a valid point. Although the goal should be creating a solution that is easier to start with which can be future proof. That's both the problem and the solution. In the perfect world you'll have a solution that you…

    Comment linking /post/why-decouple-authorizations

    on “Launch HN: Warrant (YC S21) – Authorization and access control as a service”
  6. Submitted Stop trying to replicate ReBAC type permissions using roles or attributes as a story · 8 points

    HN discussion
  7. Congrats on the launch! One of the founders of Permify is here. We love this approach and Google Zanzibar paper, as we're a taking pretty similar approach with Permify but as an Open-source product.[1] As some mentioned there are legacy tools like AWS Cognito, which mostly focuses on authentication and simpler authorization use cases. But it's evident for us, that in order to solve these problems you have mentioned[…

    Comment linking /post/why-decouple-authorizations

    on “Launch HN: Warrant (YC S21) – Authorization and access control as a service”
  8. Submitted Decouple Authorizations for Laravel. Where Laravel Authorizations Left-Off as a story · 7 points

    HN discussion
  9. Hey Everyone, Firat from Permify here. My co-founders and I have been building things together since high school. Almost a year ago, we started building a project management system for a client. We start simple but things got complicated pretty fast, as the project grew clients need new access control features. Authorization is usually something overlooked. So it gets harder, and harder. And when the time comes to c…

    Comment linking /

    on “Show HN: Granular Authorization and Access Control System Based on OPA”
  10. Submitted Show HN: Turn your no/low-code apps into enterprise ready B2B SaaS apps as a story · 7 points

    HN discussion
  11. For PoC Firebase Authentication https://firebase.google.com/docs/auth You get hosted + UI + OAuth There are many others: https://supabase.com/docs/guides/auth/overview https://www.keycloak.org/ https://www.permify.co/ ... ..

    Comment linking /

    on “Ask HN: Lightweight Authentication”
  12. Submitted Show HN: Permify Now Supports Attribute-Based Access Control as a story · 6 points

    HN discussion
  13. Submitted Google Zanzibar in a Nutshell as a story · 5 points

    HN discussion
  14. Submitted Show HN: Blending Go and WebAssembly to Build Authorization Playground as a story · 4 points

    HN discussion
  15. Submitted Relationship Based Access Control Models as a story · 4 points

    HN discussion
  16. Submitted Why you need to outsource Authorization? as a story · 4 points

    HN discussion
  17. Submitted Exploring Google Zanzibar: A Demonstration as a story · 3 points

    HN discussion
  18. Submitted Authorization: Build vs. Buy (2024) as a story · 2 points

    HN discussion
  19. Submitted WebAssembly with Go: Taking Web Apps to the Next Level (2023) as a story · 2 points

    HN discussion
  20. Submitted A New Chapter: Permify Joins FusionAuth as a story · 2 points

    HN discussion
  21. Submitted Implementing Role Based Access Control in Node.js and Express App as a story · 2 points

    HN discussion
  22. Submitted Microservices Authentication and Authorization Using API Gateway as a story · 2 points

    HN discussion
  23. Submitted Google Zanzibar in a Nutshell as a story · 2 points

    HN discussion
  24. Submitted Google Zanzibar in a Nutshell as a story · 2 points

    HN discussion
  25. Submitted Why Google Build Zanzibar as a story · 2 points

    HN discussion
  26. Submitted What's make authorization hard, and how to get it right as a story · 2 points

    HN discussion
  27. Submitted Why Decouple Authorization? as a story · 2 points

    HN discussion
  28. Submitted Why to decouple Authorizations with latency and CPU benchmarks as a story · 2 points

    HN discussion
  29. Submitted Implementing OPA: Comprehensive Overview and Practical Examples (2024) as a story · 1 points

    HN discussion
  30. Submitted Google Used Access Control Lists (ACLs) to Build Zanzibar (2024) as a story · 1 points

    HN discussion

Search all of HN for permify.co