Comparison

Authentik vs Immich

No clear leader: Immich (50.1) and Authentik (46.2) are within the 5-point margin; treat as a tie. The attribute-by-attribute breakdown below, with a source and date on every value, is the honest way to compare them.

Authentik full profile →Immich full profile →

Machine formatsMarkdownJSONGraphQLMarkdown is open. JSON and GraphQL need a free key.

Authentik46

Immich50

Attribute comparison across 2 tools
Attribute	Authentik	Immich
vioscaleAI score	46 / 100medium · 69%	50 / 100low · 37%
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	freemium	open_source
Price levelpricing.price_level	low	free
Transparentpricing.transparent	✗	-
Integrations
Countintegrations.count	10	1
Security
Certificationssecurity.certifications	OpenID Certified, FIPS compliance	-
Disclosure policysecurity.disclosure_policy	✓	-
Fedrampsecurity.fedramp	✓	-
Gdprsecurity.gdpr	✓	-
Hipaasecurity.hipaa	✓	-
Trust centersecurity.trust_center	https://goauthentik.io/blog/authors/security/	-
Vulnerabilitiessecurity.vulnerabilities	Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40goauthentik%2Foxfmt-config&per_page=100 · Last 12m: 0	Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=immich-machine-learning&per_page=100 · Last 12m: 0
Reliability
Status pagereliability.status_page	✓	-
Adoption
Dependent reposadoption.dependent_repos	0	0
Github starsadoption.github_stars	25,816	116,101
Activity
Commits last 30dactivity.commits_last_30d	100	100
Release
Cadence daysrelease.cadence_days	6	4
Historyrelease.history	20 items	20 items
License
Spdxlicense.spdx	-	AGPL-3.0
Language
Primarylanguage.primary	Python	TypeScript
Market
Availabilitymarket.availability	Available worldwide · HQ US	-
Content
Faqcontent.faq	7 items	5 items

Score

vioscaleAI score

Authentik46 / 100medium · 69%

Immich50 / 100low · 37%

Pricing

Free tier

Authentik✓

Immich✓

Model

Authentikfreemium

Immichopen_source

Price level

Authentiklow

Immichfree

Transparent

Authentik✗

Immich–

Integrations

Count

Authentik10

Immich1

Security

Certifications

AuthentikOpenID Certified, FIPS compliance

Immich–

Disclosure policy

Authentik✓

Immich–

Fedramp

Authentik✓

Immich–

Gdpr

Authentik✓

Immich–

Hipaa

Authentik✓

Immich–

Trust center

Authentikhttps://goauthentik.io/blog/authors/security/

Immich–

Vulnerabilities

AuthentikCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40goauthentik%2Foxfmt-config&per_page=100 · Last 12m: 0

ImmichCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=immich-machine-learning&per_page=100 · Last 12m: 0

Reliability

Status page

Authentik✓

Immich–

Adoption

Dependent repos

Authentik0

Immich0

Github stars

Authentik25,816

Immich116,101

Activity

Commits last 30d

Authentik100

Immich100

Release

Cadence days

Authentik6

Immich4

History

Authentik20 items

Immich20 items

License

Spdx

Authentik–

ImmichAGPL-3.0

Language

Primary

AuthentikPython

ImmichTypeScript

Market

Availability

AuthentikAvailable worldwide · HQ US

Immich–

Content

Faq

Authentik7 items

Immich5 items

Features

The capabilities each product documents. These tools do not share a category taxonomy, so this aligns what each vendor states rather than a normalised feature set.

Declared feature comparison
Feature	Authentik	Immich
B2b multi tenant	✓	-
Hosted ui	hosted	-
Hosting	both	-
Mfa	✓	-
Oidc	✓	-
Open source	✓	-
Passkeys webauthn	✓	-
Passwordless	✓	-
Rbac	✓	-
Saml sso	✓	-
Scim provisioning	✓	-
Social login	✓	-

What each one is

The product in its own terms, so the numbers below have context.

Authentik

authentik is an open-source Identity Provider that consolidates authentication and identity management into one self-hosted platform, supporting standard protocols like OAuth2/OIDC, SAML, LDAP, and RADIUS for modern SSO deployments.

Independently observed

Immich

A self-hosted application that lets users back up and organize photos and videos from iOS and Android devices while maintaining full control and privacy. It supports multiple user accounts, searchable metadata, and offline access.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Authentik

HybridFree tier

Open SourceFree
- OIDC, SAML, LDAP, SCIM, RADIUS, Proxy support
- OpenID Certified for OpenID Connect
- Web-based RDP/SSH access
- B2B and B2C use cases
- Community Discord support
Enterprise-
- Google Workspace integration
- Microsoft Entra ID integration
- Embed external OAuth/SAML sources
- Chrome Enterprise Device Trust connector
- Shared Signals Framework support
- +9 more
Enterprise PlusContact sales
- Invoice-based billing
- Dedicated, customized support and SLAs
- Volume discounts
- Support for multi-instance deployments
- FIPS compliance for FedRAMP

as of 2026-09-07verify ↗

Immich

Open sourceFree tier

Open source with optional product key donations to support development

as of 2026-09-01verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Authentik	Immich
WebPlatforms	✓	✗
iOSPlatforms	✗	✓
AndroidPlatforms	✗	✓
macOSPlatforms	✓	✗
WindowsPlatforms	✓	✗
LinuxPlatforms	✓	✗
CLIPlatforms	✓	✗
Self-hostedDeployment	✓	✓

Platforms

Web

Authentik✓

Immich✗

iOS

Authentik✗

Immich✓

Android

Authentik✗

Immich✓

macOS

Authentik✓

Immich✗

Windows

Authentik✓

Immich✗

Linux

Authentik✓

Immich✗

CLI

Authentik✓

Immich✗

Deployment

Self-hosted

Authentik✓

Immich✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Authentik

17 total

OAuth2
OpenID Connect
SAML2
LDAP
RADIUS
SCIM
WS-Federation
Microsoft Entra ID
Google Workspace
Shared Signals Framework (SSF)
Chrome Enterprise Device Trust
Fleet
Kerberos
SAML
OAuth2/OIDC
Apple Business Manager
Google Chrome

Independently observed

Immich

1 total

OAuth

Independently observed

Still deciding?

Authentik or Immich: which one depends on you

A composite score cannot know your constraints. Describe them and both get re-weighted against what you actually need, with the evidence behind every position.

Free to run, no account needed to start. How the evaluation works

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.