--- title: Apache Shiro Reviews meta\_title: 'Apache Shiro Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 13 reviews by the users' company size, role or industry to find out how Apache Shiro works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 13 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Web Frameworks url: https://www.g2.com/categories/web-frameworks --- # Apache Shiro Reviews & Product Details Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. * * * Seller [The Apache Software Foundation](https://www.g2.com/sellers/the-apache-software-foundation) Discussions [Apache Shiro Community](https://www.g2.com/products/apache-shiro/discuss) Show More ## Top-Rated Alternatives [ ![spring.io](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "spring.io") spring.io 4.5/5(320) ](https://www.g2.com/products/spring-io/reviews) [ ![JHipster](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "JHipster") JHipster 4.4/5(97) ](https://www.g2.com/products/jhipster/reviews) [ ![Grails](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Grails") Grails 3.6/5(33) ](https://www.g2.com/products/grails/reviews) [ View All Alternatives ](https://www.g2.com/products/apache-shiro/competitors/alternatives) ## User Insights Average based on 13 real user reviews. [Log in to unlock pricing and user insights](/login) ![Nenko T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nenko T.") NT Nenko T. Senior Software Developer Enterprise (\> 1000 emp.) 1/18/2021 "Plays nice and easy to integrate" 5/5 What do you like best about Apache Shiro? Several years ago we integrated Apache Shiro to an OSGI application and it was one of the few security frameworks that played nicely. Since it was such a nice experience we decided to contribute to the project and submitted integration with EhCache. The whole process was really smooth and the community friendly Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Not sure, we didn't have any issues working with the framework Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Added authentication, authorization and session management to the application Review collected by and hosted on G2.com. Show More 1/19/2022 Validated ReviewerIncentivizedSource: G2 invite ![Yücel O.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Yücel O.") YO Yücel O. Senior Software Engineer Small-Business (50 or fewer emp.) 1/16/2021 "A Reliable and Easy to Implement Product" 4.5/5 What do you like best about Apache Shiro? It is really easy to integrate. Very widely used security framework, which makes it reliable. You can understand how to implement without too much effort. We used it for authentication and authorization of API requests, which did a nice job. And some implementations are highly customizable. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Before using Shiro I had done some research, I compared Shiro and 2 other popular security frameworks. One point Shiro was behind was code quality. Their code quality was not as good as other candidates. And the iterations are not so fast, they are still developing but I guess with limited resource. Review collected by and hosted on G2.com. Recommendations to others considering Apache Shiro: If you need a fast implementation of security layer, Apache Shiro can be a very good solution. A mid level developer can handle the development quite good. Of course you need to consider your business and tech needs. For example there can be more suitable frameworks which can fit into your tech stack, maybe offer some extra features. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? We integrated our platform login with LDAP. I used Apache Shiro there, it was easy and convenient. Also we implemented API requests auth operations with Apache Shiro. We had very strict deadlines, integrating with Shiro earned us some time. It was good to solve auth features quick and nice. We also had to customize some interfaces of the framework, it was also doable, we were successfully able to add our logic on authentication. Shiro supports resource based access control, which is cool, instead of role check we are able to check if action is permitted or not. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Sumit Kumar G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sumit Kumar G.") SG Sumit Kumar G. Software Engineer Mid-Market (51-1000 emp.) 1/13/2021 "I used apache shiro for permission check in our application. Its so flexible to use." 5/5 What do you like best about Apache Shiro? Their compatibilty of using for persmission with our application. we like the way it handle security things in our product. We mainly use for user valid user permission validation. we have different types of users and we have to distinguish them according to the roles, and for roles we are giving persmission to that roles . like admin, pro, default.Apach handle it so easily like no any other platform gave that support till now as of my knowledge. we suggest to use apache shiro for organization , its good . we are not suing in one team but also we are using in multiple projects. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? it is good, but its quite complex and giving only basic security. At first when i started using shiro the its nery difficult to understand, becuase Apach gave us so many features like an ocean of features but we have ot use only shiro and in shiro also lots of feature are available in which we have to use only few of them. So for that we have to explore a lot to search what we exactly need in shiro . yeah i face lot of challenges but at the end when i understood shiro and their functionlity then it svery good to use and work. we realyy apprecitate the way shiro gave their features. so may be it has some downside still its very good to use and we are using it our products. Review collected by and hosted on G2.com. Recommendations to others considering Apache Shiro: i suggest peple to use this. we are using in very lasge amount in our lots of product so we suggest to use it also. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Permission checks for different types of user Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Gabriel T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Gabriel T.") GT Gabriel T. Principal Software Engineer Mid-Market (51-1000 emp.) 12/18/2020 "Best open source security framework." 5/5 What do you like best about Apache Shiro? The fact that I can manage the authorization and authentication to all my users in a single intuitive point. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? In general, it's a great tool, but it was a little hard for me to find detailed documentation for advanced features. Review collected by and hosted on G2.com. Recommendations to others considering Apache Shiro: If you're looking for an easy-used security framework based in Java programming language, then Shiro is the right option for you. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? At first, we were using LDAP to manage the security permissions of our users, but when we migrated to the cloud we were really struggling with that. When we started using Apache Shiro, things became much more easier. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Architecture & Planning](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Architecture & Planning") UA Verified User in Architecture & Planning Small-Business (50 or fewer emp.) 1/11/2021 "Security and Permissions with super flexibility" 4.5/5 What do you like best about Apache Shiro? I am using Shiro security in my product. And I think the way you can set up the security and permissions using makes my application flexible and secure. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Shiro doesn't support SSO like AD and others very well. Otherwise easy to use. Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? With the help of Shiro, I solved the permissions related issues in my product. I need to set up permission up to field level with curd permissions both front end and backend. And Shiro helps me very well here. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") CH Verified User in Hospital & Health Care Mid-Market (51-1000 emp.) 1/12/2021 "App Security with Shiro" 4.5/5 What do you like best about Apache Shiro? configuring subject and maintaining app level authentication and authorization was easy using shiro Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? would be great if the configuration can be done through java class itself using annotations rather than xml (not sure if it was introduced now) Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? authentication and authorization roles and permissions management Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") CC Verified User in Computer Software Mid-Market (51-1000 emp.) 1/20/2021 "Used Apache Shiro security mechanism in almost all the projects" 4.5/5 What do you like best about Apache Shiro? Easy to implement and very easy to maintain Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? Nothing that I could remember of to dislike the library Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? We have used Apache Shiro for security mechanism, user role implementation and setting user subject for authentication Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Entertainment](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Entertainment") UE Verified User in Entertainment Mid-Market (51-1000 emp.) 2/1/2019 "Intuitive security" 4.5/5 What do you like best about Apache Shiro? Shiro offers an out of the box functionality to secure your apps easily and without any hassle. It's the library we use in a Grails application we built and it's always reliable. Review collected by and hosted on G2.com. What do you dislike about Apache Shiro? It might be hard to get into Shiro's terminology of Realms Review collected by and hosted on G2.com. What problems is Apache Shiro solving and how is that benefiting you? Authorization and Security Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/apache-shiro/pricing) ## Work at The Apache Software Foundation? Claim this profile to respond to reviews, update product info, and reach in-market buyers. [ Claim this profile ](https://www.g2.com/products/apache-shiro/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2) ##### Categories on G2 [Java Web Frameworks](https://www.g2.com/categories/java-web-frameworks) ##### Explore More [Which mobile crash reporting tools integrate with project tracking platforms for automated issue creation?](https://www.g2.com/discussions/which-mobile-crash-reporting-tools-integrate-with-project-tracking-platforms-for-automated-issue-creation)[Which tools connect suspicious device fingerprints across global networks for real-time financial fraud prevention software?](https://www.g2.com/discussions/which-tools-connect-suspicious-device-fingerprints-across-global-networks-for-real-time-financial-fraud-prevention-software)[Which health care credentialing platforms are most trusted by credentialing managers based on user reviews?](https://www.g2.com/discussions/which-health-care-credentialing-platforms-are-most-trusted-by-credentialing-managers-based-on-user-reviews) [Which solution supports secure transcription for confidential documents?](https://www.g2.com/discussions/which-solution-supports-secure-transcription-for-confidential-documents)[Which inspection management tools work best for a mid-size construction company that needs to keep site inspections consistent and corrective actions tracked across projects?](https://www.g2.com/discussions/which-inspection-management-tools-work-best-for-a-mid-size-construction-company-that-needs-to-keep-site-inspections-consistent-and-corrective-actions-tracked-across-projects)[What are the most trusted insurance suites by enterprise insurance companies based on user reviews?](https://www.g2.com/discussions/what-are-the-most-trusted-insurance-suites-by-enterprise-insurance-companies-based-on-user-reviews) [Show MoreShow Less](javascript:void(0);)