--- title: Apache Shiro Reviews meta\_title: 'Apache Shiro Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 13 reviews by the users' company size, role or industry to find out how Apache Shiro works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 13 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Web Frameworks url: https://www.g2.com/categories/web-frameworks --- # Apache Shiro Reviews & Product Details Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. * * * Seller [The Apache Software Foundation](https://www.g2.com/sellers/the-apache-software-foundation) Discussions [Apache Shiro Community](https://www.g2.com/products/apache-shiro/discuss) Show More ## Top-Rated Alternatives [ ![spring.io](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "spring.io") spring.io 4.5/5(320) ](https://www.g2.com/products/spring-io/reviews) [ ![JHipster](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "JHipster") JHipster 4.4/5(97) ](https://www.g2.com/products/jhipster/reviews) [ ![Grails](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Grails") Grails 3.6/5(33) ](https://www.g2.com/products/grails/reviews) [ View All Alternatives ](https://www.g2.com/products/apache-shiro/competitors/alternatives) ## User Insights Average based on 13 real user reviews. [Log in to unlock pricing and user insights](/login) ![Sudhakar N S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sudhakar N S.") SS Sudhakar N S. Software Engineer Enterprise (\> 1000 emp.) 11/17/2021 "Java Authentication and Authorization Services (JAAS) are fantastic in Apache Shiro" 4/5 What do you like best about Apache Shiro? Apache Shiro is a fantastic utility for managing my security measures in Java framework of my organization. It can effectively implement user authentication, server-end encryption, and client session management through its excellent API features. It gives me dynamic annotations, which helps with quick metadata evaluation during my compilation time itself. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? It needs improvements on providing transparency for developers without adding a lot of complexities in application development. This will aid in the complete implementation of a user-friendly and flexible security model. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Apache Shiro governs plenty of support in terms of PAM and AOP inspectors which are greatly responsible for the authentication and authorization of users The caching support features is great as it enhances the performance of its JAAS security operations. Also, it has superb encoding and decoding components for my diverse data formats with the help of its web functionalities. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Bibek K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Bibek K.") BK Bibek K. Sr. Software Engineer Small-Business (50 or fewer emp.) 1/19/2021 "Intuitive Auth Framework" 4/5 What do you like best about Apache Shiro? Very basic settings setup can provide great Authentication and Authorization in the application. Easy to customize according to business needs. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Support for the Framework is very limited. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? I've implemented api as well as dashboard authentication and authorization using Shiro. The benefits of using Shiro is that any usecase related to auth needs has been considered by the framework developers and its just the matter of providing setup parameters to benefit from them. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ZT Zack T. Small-Business (50 or fewer emp.) 11/17/2020 "Java security for applications" 4/5 What do you like best about Apache Shiro? Intuitive identity verification for my user and guest. JVM-based application protection. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Difficult integration at the beginning of the installation. Review collected by and hosted on G2.com. Recommendations to others considering Apache Shiro: Be secure in your applications with targeted, secure and intuitive authentication. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Security to my web application with authentication with JPS support to control the page output. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") UH Verified User in Hospital & Health Care Mid-Market (51-1000 emp.) 1/20/2021 Business partner of the seller or seller's competitor, not included in G2 scores. "Reliable and flexible product to use" 3.5/5 What do you like best about Apache Shiro? We are using it for security frameworks and the best thing is it’s implementation which is easy to do. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Quality of code was not good due to limited resources Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? We are implementing API security operations. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Abhinav U.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhinav U.") AU Abhinav U. Senior Development Engineer Computer Software Mid-Market (51-1000 emp.) 5/26/2018 "Easy to use authentication framework for your applications" 4/5 What do you like best about Apache Shiro? I used Apache Shiro in one of my projects. It's a highly configurable authentication framework for Java based web applications. It provides role and permission based authentication and authorization facility. The hashing algorithm used for storing the credentials are also user pluggable and you can switch them to the latest and greatest industrial algorithms you want to use. No sweat in using it Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Some more how-to guides would be nice to have for using the framework. Review collected by and hosted on G2.com. Recommendations to others considering Apache Shiro: I would say try it out, it's light weight and easy to try. If it meets your requirements go for it. Many things are configurable, providing a lot of flexibility in implementation. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Using it as a plug and play authentication framework in my projects Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/apache-shiro/pricing) ## Work at The Apache Software Foundation? Claim this profile to respond to reviews, update product info, and reach in-market buyers. [ Claim this profile ](https://www.g2.com/products/apache-shiro/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2) ##### Categories on G2 [Java Web Frameworks](https://www.g2.com/categories/java-web-frameworks) ##### Explore More [Which mobile crash reporting tools integrate with project tracking platforms for automated issue creation?](https://www.g2.com/discussions/which-mobile-crash-reporting-tools-integrate-with-project-tracking-platforms-for-automated-issue-creation)[Which tools connect suspicious device fingerprints across global networks for real-time financial fraud prevention software?](https://www.g2.com/discussions/which-tools-connect-suspicious-device-fingerprints-across-global-networks-for-real-time-financial-fraud-prevention-software)[Which health care credentialing platforms are most trusted by credentialing managers based on user reviews?](https://www.g2.com/discussions/which-health-care-credentialing-platforms-are-most-trusted-by-credentialing-managers-based-on-user-reviews) [Which solution supports secure transcription for confidential documents?](https://www.g2.com/discussions/which-solution-supports-secure-transcription-for-confidential-documents)[Which inspection management tools work best for a mid-size construction company that needs to keep site inspections consistent and corrective actions tracked across projects?](https://www.g2.com/discussions/which-inspection-management-tools-work-best-for-a-mid-size-construction-company-that-needs-to-keep-site-inspections-consistent-and-corrective-actions-tracked-across-projects)[What are the most trusted insurance suites by enterprise insurance companies based on user reviews?](https://www.g2.com/discussions/what-are-the-most-trusted-insurance-suites-by-enterprise-insurance-companies-based-on-user-reviews) [Show MoreShow Less](javascript:void(0);)