Comparison

Keycloak vs Logto

On the evidence we track, Keycloak leads this comparison with a composite score of 72/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Keycloak full profile →Logto full profile →

Machine formatsJSON Markdown GraphQLor send Accept: application/json

★Keycloak72

Logto59

Attribute comparison across 2 tools
Attribute	KeycloakLeader	Logto
Vioscale score	72 / 100low · 47%	59 / 100high · 75%
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	open_source	commercial
Price levelpricing.price_level	free	low
Transparentpricing.transparent	✓	✓
Integrations
Countintegrations.count	10	13
Security
Disclosure policysecurity.disclosure_policy	✓	✓
Scorecardsecurity.scorecard	7.9	-
Soc2security.soc2	-	✓
Vulnerabilitiessecurity.vulnerabilities	Count: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL	Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40logto%2Fphrases&per_page=100 · Last 12m: 0
Reliability
Status pagereliability.status_page	-	✓
Adoption
Dependent reposadoption.dependent_repos	1,153	11
Github starsadoption.github_stars	36,428	14,466
Package downloads weeklyadoption.package_downloads_weekly	1,713,825	-
Activity
Commits last 30dactivity.commits_last_30d	100	100
Release
Cadence daysrelease.cadence_days	13	29
Historyrelease.history	20 items	20 items
License
Spdxlicense.spdx	Apache-2.0	MPL-2.0
Language
Primarylanguage.primary	Java	TypeScript
Market
Availabilitymarket.availability	Available worldwide	Available worldwide · HQ US

Score

Vioscale score

Keycloak72 / 100low · 47%

Logto59 / 100high · 75%

Pricing

Free tier

Keycloak✓

Logto✓

Model

Keycloakopen_source

Logtocommercial

Price level

Keycloakfree

Logtolow

Transparent

Keycloak✓

Logto✓

Integrations

Count

Keycloak10

Logto13

Security

Disclosure policy

Keycloak✓

Logto✓

Scorecard

Keycloak7.9

Logto–

Soc2

Keycloak–

Logto✓

Vulnerabilities

KeycloakCount: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL

LogtoCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40logto%2Fphrases&per_page=100 · Last 12m: 0

Reliability

Status page

Keycloak–

Logto✓

Adoption

Dependent repos

Keycloak1,153

Logto11

Github stars

Keycloak36,428

Logto14,466

Package downloads weekly

Keycloak1,713,825

Logto–

Activity

Commits last 30d

Keycloak100

Logto100

Release

Cadence days

Keycloak13

Logto29

History

Keycloak20 items

Logto20 items

License

Spdx

KeycloakApache-2.0

LogtoMPL-2.0

Language

Primary

KeycloakJava

LogtoTypeScript

Market

Availability

KeycloakAvailable worldwide

LogtoAvailable worldwide · HQ US

Capabilities

Feature-by-feature on the axes that matter for auth & identity software. “-” means undocumented, not absent.

Capability comparison for Auth & Identity Software
Capability	Keycloak	Logto
Deployment
Hosting	Cloud + self-hosted	Cloud + self-hosted
Methods
Social login	✓	✓
Passwordless	✓	✓
Passkeys / WebAuthn	✓	✓
Multi-factor auth	✓	✓
Enterprise
SAML SSO	✓	✓
SCIM provisioning	✓	✓
B2B / multi-tenancy	✓	✓
Standards
OpenID Connect provider	✓	✓
Delivery
Hosted UI	Both	Both
Access
RBAC	✓	✓
Licensing
Self-hostable OSS core	✓	✓

Deployment

Hosting

KeycloakCloud + self-hosted

LogtoCloud + self-hosted

Methods

Social login

Keycloak✓

Logto✓

Passwordless

Keycloak✓

Logto✓

Passkeys / WebAuthn

Keycloak✓

Logto✓

Multi-factor auth

Keycloak✓

Logto✓

Enterprise

SAML SSO

Keycloak✓

Logto✓

SCIM provisioning

Keycloak✓

Logto✓

B2B / multi-tenancy

Keycloak✓

Logto✓

Standards

OpenID Connect provider

Keycloak✓

Logto✓

Delivery

Hosted UI

KeycloakBoth

LogtoBoth

Access

RBAC

Keycloak✓

Logto✓

Licensing

Self-hostable OSS core

Keycloak✓

Logto✓

What each one is

The product in its own terms, so the numbers below have context.

Keycloak

Leader

Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems.

Independently observed

Logto

A developer-focused identity infrastructure that handles user authentication, authorization, and access control across web, mobile, and server applications. Built on standard protocols including OIDC, OAuth 2.1, and SAML with native support for multi-tenancy, enterprise single sign-on, and role-based access control.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Keycloak

Leader

Open sourceFree tier

Free, open-source software

as of 2026-08-14verify ↗

Logto

from $0.08/moHybridFree tier

From $24/month. Free tier with 50K MAUs. Usage-based token billing.

FreeFree
- User authentication
- Machine-to-Machine applications
- Account APIs
- Audit logs and user management
- 3 applications
- +9 more
Pro$24/month plus $0.08 per 100 additional tokens. Unlimited MAUs.
- Unlimited applications
- Unlimited user roles
- Unlimited Machine-to-Machine roles
- 1 included Machine-to-Machine app
- Unlimited API resources (3 included)
- +19 more
EnterpriseContact sales
- Custom resource quota
- Custom data region
- Logto Private Cloud
- Service-Level Agreement (SLA)
- Premium support
- +1 more

as of 2026-08-14verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Keycloak	Logto
WebPlatforms	✓	✓
iOSPlatforms	✗	✓
AndroidPlatforms	✗	✓
WindowsPlatforms	✓	✗
LinuxPlatforms	✓	✗
CLIPlatforms	✓	✓
Cloud / SaaSDeployment	✓	✓
Self-hostedDeployment	✓	✓
On-premiseDeployment	✓	✗
HybridDeployment	✓	✗

Platforms

Web

Keycloak✓

Logto✓

iOS

Keycloak✗

Logto✓

Android

Keycloak✗

Logto✓

Windows

Keycloak✓

Logto✗

Linux

Keycloak✓

Logto✗

CLI

Keycloak✓

Logto✓

Deployment

Cloud / SaaS

Keycloak✓

Logto✓

Self-hosted

Keycloak✓

Logto✓

On-premise

Keycloak✓

Logto✗

Hybrid

Keycloak✓

Logto✗

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

In common (3)

GitHub
Google
Facebook

Keycloak

Leader

10 total - 7 not shared

Twitter
LDAP
Active Directory
Kerberos
Kubernetes
Apache APISIX
OpenTelemetry

Independently observed

Logto

13 total - 10 not shared

Apple
Discord
Azure AD
Okta
Google One Tap
Google reCAPTCHA Enterprise
Cloudflare Turnstile
SMS services
SMTP email
HTTPS email

Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.