https://www.ory.sh/ logo
#general
Title
# general
f

full-parrot-37019

11/06/2021, 8:48 AM
Hi, the pricing page (https://www.ory.sh/pricing) says that selfhosted ory cloud is free. How can I try selfhosted version of the ory cloud? I can not find docker containers or guide in docs. Maybe the selfhosted variant is not ready yet? I don't quite understand what ory cloud is. Is it just a nice UI over other ory services? Also, are there any records from ory summit available?
🤩 1
h

high-optician-2097

11/06/2021, 10:51 AM
Hey there, self-hosted still refers to the open source 🙂 We are improving the ory cloud product significantly over the next few weeks. The idea is to have
kratos deploy
that works similar to
kratos serve
but runs kratos in our system - so you don't need to worry about scaling, database ops, configuration management, cookies, ... Ory Cloud will also be available for free (we introduce a free developer plan) starting in a few weeks. You get more things out of this too, for example our hosted UI for login pages etc, nice configuration options and management APIs, an adminsitrative admin UI, and also insights and metrics! 🙂
cc @orange-needle-13244
Regarding videos - we will be releasing them next week, we did not manage to do it last week unfortunately.
👀 1
f

full-parrot-37019

11/06/2021, 11:26 AM
ooh, okey. So Ory cloud is nice UI wrapper over Kratos with some features like metric etc. to allow a non-programmer to work with the ory stack?
h

high-optician-2097

11/06/2021, 4:37 PM
Yes, and also convenience - you don't need like ports and docker and helm and kubernetes 🙂
🙌 1
o

orange-needle-13244

11/09/2021, 7:36 AM
@full-parrot-37019 super good to have you! Are you interested in a call to discuss your requirement and see if Ory Cloud is a good fit for your engineering efforts?
f

full-parrot-37019

11/09/2021, 8:37 AM
We could call but I don't want to waste your time. We will probably not become paying customers (we are only interested in the selfhosted version). I don't like the idea of putting data in your cloud. I was interested by Ory because I didn't want to have sensitive user account data in cloud. Overall, I have mixed feelings about Ory cloud 😄
h

high-optician-2097

11/09/2021, 9:39 AM
What’s your concern? You’re probably using things like CloudFlare, AWS, GCP, managed databases with all your sensitive data - so you already putting it in the cloud. Why is it different with Ory and is spending so much time yourself on getting everything to work & upgrade & be managed smoothly worth it? Plus, you now have a service provider that takes part of your risk (getting hacked, leaked, whatever) as they run the service. Would be great if you could explain this a bit!
f

full-parrot-37019

11/09/2021, 11:44 AM
You are right that we use Cloudflare and other cloud services. But we do not store emails and other personal information of our customers, clients and employees anywhere on the cloud. If I don't mind using the cloud auth stack, I'd prefer Google, Microsoft or Auth0, because these are more production ready solutions... For me, the biggest plus of Ory is that it can run on our servers. If there is a data leak, It will be my fault.
I think it depends on the business you do. If I had an ordinary e-shop, I don't care where the user identities are stored.
h

high-optician-2097

11/09/2021, 12:20 PM
I see so your biggest concern is then not to outsource this or put this data with other accounts, but that Ory Cloud is too new / not established yet? Btw cloudflare does have access to all your traffic including emails if you use their proxy capa)
What would in your mind make Ory a trusted player?
We’ve been publishing hardcore security software for 7+ years and have basically no vulnerabilities in the core products (kratos/hydra/keto) but I guess that’s not enough 😄
btw - don’t want to come over as defensive or anything, but I’m genuinely interested in your concerns! I think a lot of people share those and it would be great to see what we need to do to gain your and other’s trust!
f

full-parrot-37019

11/09/2021, 12:52 PM
look, I cant tell customers that we store their identities somewhere in the cloud. But I can tell them, that we use cloudflare to make our servicess more accessible... I know it doesnt make sense from your perspective. But this is only our (probably exceptional) case...
h

high-optician-2097

11/09/2021, 1:05 PM
Ok sorry, don’t want to annoy you 🙂 Just interested to hear the concerns people have about this. Maybe we can develop resources that explain the trade offs. I think that one day it will be an anti-pattern to NOT use ory to store sensitive customer and user information, because the risks of doing it yourself are too high compared to consuming them as a service and having insurance by that service. But we’re not there yet 😉
f

full-parrot-37019

11/09/2021, 1:08 PM
I am looking forward to those days 😄 Definitely some infographics would help, where the advantages and disadvantages of selfhosted and cloud versions would be compared.
h

high-optician-2097

11/09/2021, 1:12 PM
ping @orange-needle-13244 @magnificent-energy-493 ^ see this thread pls
🙏 1
m

magnificent-energy-493

11/09/2021, 1:17 PM
it is actually a pretty common case, and making the benefits/differences of Ory Cloud more clear is one of our main tasks, so thanks a lot @full-parrot-37019 for providing your perspective 🙏
h

hallowed-rain-91377

11/09/2021, 10:17 PM
we just had a similar convo internally as well… there seems to be a perception that ory is still immature, equated to a series-A startup offering.
any material that refutes that is welcome
h

high-optician-2097

11/10/2021, 9:15 AM
We don’t really have marketing material for this, the best place to look is consistency in delivering security software 😅 That you can find in the git history only though 😕
What would give you more confidence? Promises? Use cases or references?
f

full-parrot-37019

11/10/2021, 3:03 PM
Definetly references. Does some big corporation use Ory?
m

magnificent-energy-493

11/10/2021, 3:18 PM
Sure, we have several on our website and GitHub README: https://www.sainsburys.co.uk/ https://www.raspberrypi.org/ https://www.discogs.com/ https://hootsuite.com/ and so on. Many are not listed publicly, like blues.io, imgur.com, fandom.com, wish.com, german stock exchange, sumup.com, tinkoff.ru Those come from the top of my head. We are working on creating some more marketing material around that, but it will take some time 🙂
24 Views