Comparison

Keycloak vs Ory

No clear leader: Ory (71.9) and Keycloak (71.8) are within the 5-point margin; treat as a tie. The attribute-by-attribute breakdown below, with a source and date on every value, is the honest way to compare them.

Keycloak full profile →Ory full profile →

Machine formatsJSON Markdown GraphQLor send Accept: application/json

Keycloak72

Ory72

Attribute comparison across 2 tools
Attribute	Keycloak	Ory
Vioscale score	72 / 100low · 47%	72 / 100medium · 66%
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	open_source	freemium
Price levelpricing.price_level	free	unknown
Transparentpricing.transparent	✓	✓
Integrations
Countintegrations.count	10	2
Security
Disclosure policysecurity.disclosure_policy	✓	✓
Gdprsecurity.gdpr	-	✓
Iso27001security.iso27001	-	✓
Pcisecurity.pci	-	✓
Scorecardsecurity.scorecard	7.9	6.7
Soc2security.soc2	-	✓
Vulnerabilitiessecurity.vulnerabilities	Count: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL	Count: 2 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fory%2Fkratos&per_page=100 · Last 12m: 1 · Max severity: HIGH
Reliability
Sla pctreliability.sla_pct	-	99.99
Status pagereliability.status_page	-	✓
Adoption
Dependent reposadoption.dependent_repos	1,153	9
Github starsadoption.github_stars	36,428	13,848
Package downloads weeklyadoption.package_downloads_weekly	1,713,825	-
Activity
Commits last 30dactivity.commits_last_30d	100	60
Release
Cadence daysrelease.cadence_days	13	66
Historyrelease.history	20 items	20 items
License
Spdxlicense.spdx	Apache-2.0	Apache-2.0
Language
Primarylanguage.primary	Java	Go
Market
Availabilitymarket.availability	Available worldwide	Available worldwide

Score

Vioscale score

Keycloak72 / 100low · 47%

Ory72 / 100medium · 66%

Pricing

Free tier

Keycloak✓

Ory✓

Model

Keycloakopen_source

Oryfreemium

Price level

Keycloakfree

Oryunknown

Transparent

Keycloak✓

Ory✓

Integrations

Count

Keycloak10

Ory2

Security

Disclosure policy

Keycloak✓

Ory✓

Gdpr

Keycloak–

Ory✓

Iso27001

Keycloak–

Ory✓

Pci

Keycloak–

Ory✓

Scorecard

Keycloak7.9

Ory6.7

Soc2

Keycloak–

Ory✓

Vulnerabilities

KeycloakCount: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL

OryCount: 2 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fory%2Fkratos&per_page=100 · Last 12m: 1 · Max severity: HIGH

Reliability

Sla pct

Keycloak–

Ory99.99

Status page

Keycloak–

Ory✓

Adoption

Dependent repos

Keycloak1,153

Ory9

Github stars

Keycloak36,428

Ory13,848

Package downloads weekly

Keycloak1,713,825

Ory–

Activity

Commits last 30d

Keycloak100

Ory60

Release

Cadence days

Keycloak13

Ory66

History

Keycloak20 items

Ory20 items

License

Spdx

KeycloakApache-2.0

OryApache-2.0

Language

Primary

KeycloakJava

OryGo

Market

Availability

KeycloakAvailable worldwide

OryAvailable worldwide

Capabilities

Feature-by-feature on the axes that matter for auth & identity software. “-” means undocumented, not absent.

Capability comparison for Auth & Identity Software
Capability	Keycloak	Ory
Deployment
Hosting	Cloud + self-hosted	Cloud + self-hosted
Methods
Social login	✓	-
Passwordless	✓	✓
Passkeys / WebAuthn	✓	✓
Multi-factor auth	✓	-
Enterprise
SAML SSO	✓	✓
SCIM provisioning	✓	✓
B2B / multi-tenancy	✓	✓
Standards
OpenID Connect provider	✓	✓
Delivery
Hosted UI	Both	Both
Access
RBAC	✓	✓
Licensing
Self-hostable OSS core	✓	✓

Deployment

Hosting

KeycloakCloud + self-hosted

OryCloud + self-hosted

Methods

Social login

Keycloak✓

Ory-

Passwordless

Keycloak✓

Ory✓

Passkeys / WebAuthn

Keycloak✓

Ory✓

Multi-factor auth

Keycloak✓

Ory-

Enterprise

SAML SSO

Keycloak✓

Ory✓

SCIM provisioning

Keycloak✓

Ory✓

B2B / multi-tenancy

Keycloak✓

Ory✓

Standards

OpenID Connect provider

Keycloak✓

Ory✓

Delivery

Hosted UI

KeycloakBoth

OryBoth

Access

RBAC

Keycloak✓

Ory✓

Licensing

Self-hostable OSS core

Keycloak✓

Ory✓

What each one is

The product in its own terms, so the numbers below have context.

Keycloak

Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems.

Independently observed

Ory

Flexible IAM platform offering modular authentication, authorization, and user management components. Supports multiple deployment modes—managed cloud services, self-hosted open-source, or on-premise enterprise—with built-in support for modern standards including OAuth 2.0, OpenID Connect, SAML, SCIM, and device-based authentication.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Keycloak

Open sourceFree tier

Free, open-source software

as of 2026-08-14verify ↗

Ory

from $0.14/moHybridFree tier

From $770/year. Free Developer tier. Usage-based (aDAU) metered pricing available.

DeveloperFree
Production$770/year plus $0.14/aDAU/month
- All top-tier security features
- 1 production environment and 3 staging environments
- Permissions and machine-to-machine tokens
Growth$9,350/year
- Everything from Production
- Advanced analytics and insights
- 2 production environments and 5 staging environments
- B2B SSO (OIDC only)
Enterprise (SaaS)Contact sales
- Everything from Growth
- Event firehose to data lake
- Multi-region deployments with data residency
- Volume pricing
- Enterprise integrations for legacy systems
- +4 more
Enterprise License (Self-Hosted)Contact sales
- Full control of hosting
- Multi-region deployment flexibility
- Custom pricing
- Premium enterprise integrations
- Premium support with SLAs

as of 2026-08-05verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Keycloak	Ory
WebPlatforms	✓	✓
WindowsPlatforms	✓	✗
LinuxPlatforms	✓	✗
CLIPlatforms	✓	✓
Cloud / SaaSDeployment	✓	✓
Self-hostedDeployment	✓	✓
On-premiseDeployment	✓	✓
HybridDeployment	✓	✗
Air-gappedDeployment	✗	✓

Platforms

Web

Keycloak✓

Ory✓

Windows

Keycloak✓

Ory✗

Linux

Keycloak✓

Ory✗

CLI

Keycloak✓

Ory✓

Deployment

Cloud / SaaS

Keycloak✓

Ory✓

Self-hosted

Keycloak✓

Ory✓

On-premise

Keycloak✓

Ory✓

Hybrid

Keycloak✓

Ory✗

Air-gapped

Keycloak✗

Ory✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Keycloak

10 total

GitHub
Google
Facebook
Twitter
LDAP
Active Directory
Kerberos
Kubernetes
Apache APISIX
OpenTelemetry

Independently observed

Ory

2 total

Amazon SES
AWS API Gateway

Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.