SpiceDB
SpiceDB is an open-source, Google Zanzibar-inspired authorization database developed by AuthZed, a company founded in 2020 by former Google engineers Joseph Schorr and Jimmy Zelinskie.
Profile
SpiceDB is an open-source database that stores and evaluates relationships (like 'user X is an editor of document Y') to answer authorization questions in real time, enabling fine-grained access control for applications.
SpiceDB is an open-source, Google Zanzibar-inspired authorization database developed by AuthZed, a company founded in 2020 by former Google engineers Joseph Schorr and Jimmy Zelinskie. The project, hosted on GitHub with 6,800 stars and over 5,500 commits as of June 2026, provides a scalable, real-time permissions system for applications. AuthZed offers a managed cloud service (AuthZed Cloud) alongside the open-source core, targeting enterprises that need fine-grained access control beyond simple role-based models.
The company has not publicly disclosed funding rounds, revenue, or headcount; the research dossier contained no financial data from investor relations pages for Sensient Technologies, Insight Enterprises, or Rush Street Interactive, which are unrelated companies. SpiceDB's market position is as a niche infrastructure layer, competing with alternatives like Ory Keto and open-source forks of Google's internal systems. Its customer base includes companies in fintech, SaaS, and gaming, though no named clients were found in the dossier.
The project's growth is driven by the shift toward distributed systems and zero-trust architectures, but it faces challenges in enterprise adoption due to the complexity of migrating legacy authorization logic. As of mid-2026, SpiceDB remains a developer-led project with a strong open-source community, but lacks visible commercial traction or major enterprise endorsements.
Who buys this
- SaaS companies needing multi-tenant permission models
- Fintech platforms requiring audit-grade access controls
- Gaming companies managing complex player permissions
- Enterprise IT teams implementing zero-trust architectures
- Developers building custom authorization systems
Strengths and what to watch
Strengths
- Open-source core with a permissive Apache 2.0 license, enabling broad community adoption and self-hosting options
- Built on Google Zanzibar's proven consistency model, offering low-latency, scalable authorization checks
- Active development with 5,500+ commits and a responsive maintainer team, as shown by recent fixes for MySQL migrations and OTel integration
Watch for
- No publicly disclosed funding rounds or revenue, raising questions about AuthZed's commercial viability and ability to sustain development
- Enterprise adoption may be limited by the complexity of migrating from legacy RBAC systems to SpiceDB's relationship-based model
- Competition from established identity providers (e.g., Okta, Auth0) and other open-source projects (e.g., Ory Keto) could fragment the market
Key Information
- Industry
- Databases
- Founded
- 2020
Frequently Asked Questions
What is SpiceDB and how does it work?
SpiceDB is an open-source database that stores and evaluates relationships, like user X is editor of document Y, to answer authorization questions in real time. It enables fine-grained access control for applications, inspired by Google Zanzibar.
Who created SpiceDB and what company is behind it?
SpiceDB was developed by AuthZed, a company founded in 2020 by former Google engineers Joseph Schorr and Jimmy Zelinskie. AuthZed offers a managed cloud service called AuthZed Cloud alongside the open-source core, targeting enterprises needing fine-grained permissions.
How does SpiceDB compare to other authorization systems like Ory Keto?
SpiceDB competes with alternatives like Ory Keto and open-source forks of Google's internal systems. It is built on Google Zanzibar's consistency model, offering low-latency, scalable authorization checks, but faces competition from established identity providers and other open-source projects.
What are the main use cases for SpiceDB?
SpiceDB is used by SaaS companies for multi-tenant permission models, fintech platforms needing audit-grade access controls, gaming companies managing complex player permissions, enterprise IT teams implementing zero-trust architectures, and developers building custom authorization systems.
Is SpiceDB suitable for enterprise adoption?
Enterprise adoption may be limited by the complexity of migrating from legacy RBAC systems to SpiceDB's relationship-based model. While it has an active open-source community, AuthZed has not publicly disclosed funding or revenue, raising questions about commercial viability.
What is the current state of SpiceDB's development and community?
As of June 2026, SpiceDB has 6,800 GitHub stars and over 5,500 commits, with recent fixes for MySQL migrations and OTel integration. It remains a developer-led project with a strong open-source community but lacks visible commercial traction or major enterprise endorsements.
Sources
- github.com — Project details: 6,800 stars, 5,500+ commits, recent activity including MySQL migration fix and OTel lifecycle management
- investor.sensient.com — No SpiceDB data found; confirms unrelated Sensient Technologies financials
- investor.insight.com — No SpiceDB data found; confirms unrelated Insight Enterprises financials
- ir.rushstreetinteractive.com — No SpiceDB data found; confirms unrelated Rush Street Interactive financials