Skip to content
← Tools / Skills
ToolTiny Ltd./10 trustMetrics-checked

Oso

Declarative authorization with the Polar policy language; Oso Cloud was acquired by Tiny in October 2026.

Acquired — still operating

acquired asset; confirm availability

Visit official site →

About

Oso is an authorization company founded in 2019 that sells software companies build into their products to control what each user can see and do. Its platform uses the declarative Polar policy language for fine-grained access control and, more recently, agent authorization use cases including risky tool detection and audit enforcement. The company raised about $26M in venture funding.

In October 2026 the story changed: holding company Tiny Ltd. completed the acquisition of the Oso Cloud assets (about $5.3M in ARR across roughly 80 customers) for approximately $1.9M, and the Oso team members joined Temporal to build authorization natively into its execution platform for AI agents. This entry is kept for the record as an acquired asset; confirm current product availability on osohq.com before adopting.

What it can do

  • Declarative authorization with the Polar policy language
  • Fine-grained access control embedded in applications
  • Audit trails of authorization decisions
  • Agent authorization with risky tool detection
  • Migration tooling from other authorization services

Setup

Oso Cloud was acquired by Tiny in October 2026 and the team joined Temporal; check osohq.com for the current status of the hosted product and open-source libraries.

Prerequisites

An application needing fine-grained authorization; confirm current product availability given the October 2026 acquisition.

Use cases

authorizationpolicy-as-codeagent-access-controlauditaccess-control

Works with

Trust score — 6/10

/10 trustMetrics-checked

Scored 6/10 (metrics tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 94; Trending score 60/100 from researcher assessment.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.