--- title: Apache Shiro Reviews meta_title: 'Apache Shiro Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 13 reviews by the users' company size, role or industry to find out how Apache Shiro works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 13 scale: '5' date_modified: '2026-06-15' parent_category: name: Web Frameworks url: https://www.g2.com/categories/web-frameworks --- # Apache Shiro Reviews **Vendor:** The Apache Software Foundation **Category:** [Java Web Frameworks](https://www.g2.com/categories/java-web-frameworks) **Average Rating:** 4.5/5.0 **Total Reviews:** 13 ## About Apache Shiro Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. ## Apache Shiro Reviews ### 1. Java Authentication and Authorization Services (JAAS) are fantastic in Apache Shiro **Rating:** 4.0/5.0 stars **Reviewed by:** Sudhakar N S. | Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** November 17, 2021 **What do you like best about Apache Shiro?** Apache Shiro is a fantastic utility for managing my security measures in Java framework of my organization. It can effectively implement user authentication, server-end encryption, and client session management through its excellent API features. It gives me dynamic annotations, which helps with quick metadata evaluation during my compilation time itself. **What do you dislike about Apache Shiro?** It needs improvements on providing transparency for developers without adding a lot of complexities in application development. This will aid in the complete implementation of a user-friendly and flexible security model. **What problems is Apache Shiro solving and how is that benefiting you?** Apache Shiro governs plenty of support in terms of PAM and AOP inspectors which are greatly responsible for the authentication and authorization of users The caching support features is great as it enhances the performance of its JAAS security operations. Also, it has superb encoding and decoding components for my diverse data formats with the help of its web functionalities. ### 2. Plays nice and easy to integrate **Rating:** 5.0/5.0 stars **Reviewed by:** Nenko T. | Senior Software Developer, Enterprise (> 1000 emp.) **Reviewed Date:** January 18, 2021 **What do you like best about Apache Shiro?** Several years ago we integrated Apache Shiro to an OSGI application and it was one of the few security frameworks that played nicely. Since it was such a nice experience we decided to contribute to the project and submitted integration with EhCache. The whole process was really smooth and the community friendly **What do you dislike about Apache Shiro?** Not sure, we didn't have any issues working with the framework **What problems is Apache Shiro solving and how is that benefiting you?** Added authentication, authorization and session management to the application ### 3. A Reliable and Easy to Implement Product **Rating:** 4.5/5.0 stars **Reviewed by:** Yücel O. | Senior Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** January 16, 2021 **What do you like best about Apache Shiro?** It is really easy to integrate. Very widely used security framework, which makes it reliable. You can understand how to implement without too much effort. We used it for authentication and authorization of API requests, which did a nice job. And some implementations are highly customizable. **What do you dislike about Apache Shiro?** Before using Shiro I had done some research, I compared Shiro and 2 other popular security frameworks. One point Shiro was behind was code quality. Their code quality was not as good as other candidates. And the iterations are not so fast, they are still developing but I guess with limited resource. **Recommendations to others considering Apache Shiro:** If you need a fast implementation of security layer, Apache Shiro can be a very good solution. A mid level developer can handle the development quite good. Of course you need to consider your business and tech needs. For example there can be more suitable frameworks which can fit into your tech stack, maybe offer some extra features. **What problems is Apache Shiro solving and how is that benefiting you?** We integrated our platform login with LDAP. I used Apache Shiro there, it was easy and convenient. Also we implemented API requests auth operations with Apache Shiro. We had very strict deadlines, integrating with Shiro earned us some time. It was good to solve auth features quick and nice. We also had to customize some interfaces of the framework, it was also doable, we were successfully able to add our logic on authentication. Shiro supports resource based access control, which is cool, instead of role check we are able to check if action is permitted or not. ### 4. I used apache shiro for permission check in our application. Its so flexible to use. **Rating:** 5.0/5.0 stars **Reviewed by:** Sumit Kumar G. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 13, 2021 **What do you like best about Apache Shiro?** Their compatibilty of using for persmission with our application. we like the way it handle security things in our product. We mainly use for user valid user permission validation. we have different types of users and we have to distinguish them according to the roles, and for roles we are giving persmission to that roles . like admin, pro, default.Apach handle it so easily like no any other platform gave that support till now as of my knowledge. we suggest to use apache shiro for organization , its good . we are not suing in one team but also we are using in multiple projects. **What do you dislike about Apache Shiro?** it is good, but its quite complex and giving only basic security. At first when i started using shiro the its nery difficult to understand, becuase Apach gave us so many features like an ocean of features but we have ot use only shiro and in shiro also lots of feature are available in which we have to use only few of them. So for that we have to explore a lot to search what we exactly need in shiro . yeah i face lot of challenges but at the end when i understood shiro and their functionlity then it svery good to use and work. we realyy apprecitate the way shiro gave their features. so may be it has some downside still its very good to use and we are using it our products. **Recommendations to others considering Apache Shiro:** i suggest peple to use this. we are using in very lasge amount in our lots of product so we suggest to use it also. **What problems is Apache Shiro solving and how is that benefiting you?** Permission checks for different types of user ### 5. Best open source security framework. **Rating:** 5.0/5.0 stars **Reviewed by:** Gabriel T. | Principal Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 18, 2020 **What do you like best about Apache Shiro?** The fact that I can manage the authorization and authentication to all my users in a single intuitive point. **What do you dislike about Apache Shiro?** In general, it's a great tool, but it was a little hard for me to find detailed documentation for advanced features. **Recommendations to others considering Apache Shiro:** If you're looking for an easy-used security framework based in Java programming language, then Shiro is the right option for you. **What problems is Apache Shiro solving and how is that benefiting you?** At first, we were using LDAP to manage the security permissions of our users, but when we migrated to the cloud we were really struggling with that. When we started using Apache Shiro, things became much more easier. ### 6. Intuitive Auth Framework **Rating:** 4.0/5.0 stars **Reviewed by:** Bibek K. | Sr. Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** January 19, 2021 **What do you like best about Apache Shiro?** Very basic settings setup can provide great Authentication and Authorization in the application. Easy to customize according to business needs. **What do you dislike about Apache Shiro?** Support for the Framework is very limited. **What problems is Apache Shiro solving and how is that benefiting you?** I've implemented api as well as dashboard authentication and authorization using Shiro. The benefits of using Shiro is that any usecase related to auth needs has been considered by the framework developers and its just the matter of providing setup parameters to benefit from them. ### 7. Security and Permissions with super flexibility **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Architecture & Planning | Small-Business (50 or fewer emp.) **Reviewed Date:** January 11, 2021 **What do you like best about Apache Shiro?** I am using Shiro security in my product. And I think the way you can set up the security and permissions using makes my application flexible and secure. **What do you dislike about Apache Shiro?** Shiro doesn't support SSO like AD and others very well. Otherwise easy to use. **What problems is Apache Shiro solving and how is that benefiting you?** With the help of Shiro, I solved the permissions related issues in my product. I need to set up permission up to field level with curd permissions both front end and backend. And Shiro helps me very well here. ### 8. Java security for applications **Rating:** 4.0/5.0 stars **Reviewed by:** Zack T. | Small-Business (50 or fewer emp.) **Reviewed Date:** November 17, 2020 **What do you like best about Apache Shiro?** Intuitive identity verification for my user and guest. JVM-based application protection. **What do you dislike about Apache Shiro?** Difficult integration at the beginning of the installation. **Recommendations to others considering Apache Shiro:** Be secure in your applications with targeted, secure and intuitive authentication. **What problems is Apache Shiro solving and how is that benefiting you?** Security to my web application with authentication with JPS support to control the page output. ### 9. App Security with Shiro **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** January 12, 2021 **What do you like best about Apache Shiro?** configuring subject and maintaining app level authentication and authorization was easy using shiro **What do you dislike about Apache Shiro?** would be great if the configuration can be done through java class itself using annotations rather than xml (not sure if it was introduced now) **What problems is Apache Shiro solving and how is that benefiting you?** authentication and authorization roles and permissions management ### 10. Reliable and flexible product to use **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** January 20, 2021 **What do you like best about Apache Shiro?** We are using it for security frameworks and the best thing is it’s implementation which is easy to do. **What do you dislike about Apache Shiro?** Quality of code was not good due to limited resources **What problems is Apache Shiro solving and how is that benefiting you?** We are implementing API security operations. ### 11. Used Apache Shiro security mechanism in almost all the projects **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** January 20, 2021 **What do you like best about Apache Shiro?** Easy to implement and very easy to maintain **What do you dislike about Apache Shiro?** Nothing that I could remember of to dislike the library **What problems is Apache Shiro solving and how is that benefiting you?** We have used Apache Shiro for security mechanism, user role implementation and setting user subject for authentication ### 12. Intuitive security **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Entertainment | Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2019 **What do you like best about Apache Shiro?** Shiro offers an out of the box functionality to secure your apps easily and without any hassle. It's the library we use in a Grails application we built and it's always reliable. **What do you dislike about Apache Shiro?** It might be hard to get into Shiro's terminology of Realms **What problems is Apache Shiro solving and how is that benefiting you?** Authorization and Security ### 13. Easy to use authentication framework for your applications **Rating:** 4.0/5.0 stars **Reviewed by:** Abhinav U. | Senior Development Engineer, Computer Software, Mid-Market (51-1000 emp.) **Reviewed Date:** May 26, 2018 **What do you like best about Apache Shiro?** I used Apache Shiro in one of my projects. It's a highly configurable authentication framework for Java based web applications. It provides role and permission based authentication and authorization facility. The hashing algorithm used for storing the credentials are also user pluggable and you can switch them to the latest and greatest industrial algorithms you want to use. No sweat in using it **What do you dislike about Apache Shiro?** Some more how-to guides would be nice to have for using the framework. **Recommendations to others considering Apache Shiro:** I would say try it out, it's light weight and easy to try. If it meets your requirements go for it. Many things are configurable, providing a lot of flexibility in implementation. **What problems is Apache Shiro solving and how is that benefiting you?** Using it as a plug and play authentication framework in my projects ## Apache Shiro Discussions - [What other feature shiro is giving us which we can use in our project?](https://www.g2.com/discussions/35970-what-other-feature-shiro-is-giving-us-which-we-can-use-in-our-project) - 1 upvote - [View Apache Shiro pricing details and edition comparison](https://www.g2.com/products/apache-shiro/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-25+03%3A20%3A35+-0500&secure%5Bsession_id%5D=16cc65de-8cd8-499a-88a5-2b4deac9fff1&secure%5Btoken%5D=36c9735f0edcf26b62691393712b37597e684f74cf20314427235617cdcb48c0&format=llm_user) ## Top Apache Shiro Alternatives - [spring.io](https://www.g2.com/products/spring-io/reviews) - 4.5/5.0 (290 reviews) - [JHipster](https://www.g2.com/products/jhipster/reviews) - 4.4/5.0 (83 reviews) - [Grails](https://www.g2.com/products/grails/reviews) - 3.6/5.0 (23 reviews)