Aeneas Rekkas
- Designed and implemented Ory Hydra, a certified open-source OAuth 2.0 and OIDC server
- Co-founded the Ory open-source project in 2015 and the company in 2019
- Built Kratos, Keto, and Oathkeeper alongside Hydra
Bio
Aeneas Rekkas designed and implemented Ory Hydra and co-founded the Ory project in 2015 with Thomas Aidan Curran, forming a company around it in 2019. The Ory stack splits identity into separate services: Hydra for OAuth and OIDC, Kratos for identity and user management, Keto for permissions, and Oathkeeper as an access proxy.
Profile built from public project and company records.
Where their work shows up
Most identity servers ship as one monolith that owns the user store, the login UI, and the token endpoint together. Ory's separation, an OAuth server that holds no user credentials at all, is a real architectural position: it lets a team keep its own user database and login experience while still issuing standards-compliant tokens. See the Ory profile, OAuth vs OIDC, and RBAC vs ABAC vs ReBAC for the model Keto implements.
Related on Start with Identity
- GlossaryAccess Token
A short-lived credential a client presents to a resource server to access protected data. Access tokens are typically opaque or JWT-formatted, with lifetimes me
- BlogAgent identity just got a protocol, which is the easy half
Okta shipped Agent SSO and got Cross App Access adopted into MCP the same month a GitHub issue was shown to reach CI secrets in Claude Code and Gemini CLI. The
- BlogAgentic AI Identity Is the Next Frontier (And Your IAM Stack Isn't Ready)
AI agents now act on behalf of users, call APIs, and chain tools together. They need identities, scopes, and audit trails, and almost no existing IAM stack was
- GlossaryAgentic Identity
Identity for autonomous AI agents that act on a user's behalf, call APIs, and chain tools. Requires scoped, delegated, auditable, and revocable credentials rath
- GlossaryAuthorization Code Flow
The recommended OAuth 2.0 flow for apps with a user: the app receives a short-lived code, then exchanges it for tokens from a back channel. Combined with PKCE f
- BlogCrowdStrike agrees to buy SGNL for 740 million dollars
The deal that opened 2026's consolidation wave. SGNL brings CAEP-based continuous access evaluation and just-in-time authorization to a Falcon identity business