Comparison

Keycloak vs SuperTokens

On the evidence we track, Keycloak leads this comparison with a composite score of 72/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Keycloak full profile →SuperTokens full profile →

Machine formatsJSON Markdown GraphQLor send Accept: application/json

★Keycloak72

SuperTokens58

Attribute comparison across 2 tools
Attribute	KeycloakLeader	SuperTokens
Vioscale score	72 / 100low · 47%	58 / 100medium · 69%
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	open_source	commercial
Price levelpricing.price_level	free	low
Transparentpricing.transparent	✓	✓
Integrations
Countintegrations.count	10	7
Security
Disclosure policysecurity.disclosure_policy	✓	-
Gdprsecurity.gdpr	-	✓
Scorecardsecurity.scorecard	7.9	4.4
Soc2security.soc2	-	✓
Vulnerabilitiessecurity.vulnerabilities	Count: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL	Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fsupertokens%2Fsupertokens-core&per_page=100 · Last 12m: 0
Reliability
Sla pctreliability.sla_pct	-	99.99
Status pagereliability.status_page	-	✓
Adoption
Dependent reposadoption.dependent_repos	1,153	0
Github starsadoption.github_stars	36,428	15,282
Package downloads weeklyadoption.package_downloads_weekly	1,713,825	-
Activity
Commits last 30dactivity.commits_last_30d	100	100
Release
Cadence daysrelease.cadence_days	13	-
Historyrelease.history	20 items	20 items
License
Spdxlicense.spdx	Apache-2.0	-
Language
Primarylanguage.primary	Java	Java
Market
Availabilitymarket.availability	Available worldwide	Available worldwide

Score

Vioscale score

Keycloak72 / 100low · 47%

SuperTokens58 / 100medium · 69%

Pricing

Free tier

Keycloak✓

SuperTokens✓

Model

Keycloakopen_source

SuperTokenscommercial

Price level

Keycloakfree

SuperTokenslow

Transparent

Keycloak✓

SuperTokens✓

Integrations

Count

Keycloak10

SuperTokens7

Security

Disclosure policy

Keycloak✓

SuperTokens–

Gdpr

Keycloak–

SuperTokens✓

Scorecard

Keycloak7.9

SuperTokens4.4

Soc2

Keycloak–

SuperTokens✓

Vulnerabilities

KeycloakCount: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL

SuperTokensCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fsupertokens%2Fsupertokens-core&per_page=100 · Last 12m: 0

Reliability

Sla pct

Keycloak–

SuperTokens99.99

Status page

Keycloak–

SuperTokens✓

Adoption

Dependent repos

Keycloak1,153

SuperTokens0

Github stars

Keycloak36,428

SuperTokens15,282

Package downloads weekly

Keycloak1,713,825

SuperTokens–

Activity

Commits last 30d

Keycloak100

SuperTokens100

Release

Cadence days

Keycloak13

SuperTokens–

History

Keycloak20 items

SuperTokens20 items

License

Spdx

KeycloakApache-2.0

SuperTokens–

Language

Primary

KeycloakJava

SuperTokensJava

Market

Availability

KeycloakAvailable worldwide

SuperTokensAvailable worldwide

Capabilities

Feature-by-feature on the axes that matter for auth & identity software. “-” means undocumented, not absent.

Capability comparison for Auth & Identity Software
Capability	Keycloak	SuperTokens
Deployment
Hosting	Cloud + self-hosted	Cloud + self-hosted
Methods
Social login	✓	✓
Passwordless	✓	✓
Passkeys / WebAuthn	✓	-
Multi-factor auth	✓	✓
Enterprise
SAML SSO	✓	✓
SCIM provisioning	✓	-
B2B / multi-tenancy	✓	✓
Standards
OpenID Connect provider	✓	-
Delivery
Hosted UI	Both	Both
Access
RBAC	✓	✓
Licensing
Self-hostable OSS core	✓	✓

Deployment

Hosting

KeycloakCloud + self-hosted

SuperTokensCloud + self-hosted

Methods

Social login

Keycloak✓

SuperTokens✓

Passwordless

Keycloak✓

SuperTokens✓

Passkeys / WebAuthn

Keycloak✓

SuperTokens-

Multi-factor auth

Keycloak✓

SuperTokens✓

Enterprise

SAML SSO

Keycloak✓

SuperTokens✓

SCIM provisioning

Keycloak✓

SuperTokens-

B2B / multi-tenancy

Keycloak✓

SuperTokens✓

Standards

OpenID Connect provider

Keycloak✓

SuperTokens-

Delivery

Hosted UI

KeycloakBoth

SuperTokensBoth

Access

RBAC

Keycloak✓

SuperTokens✓

Licensing

Self-hostable OSS core

Keycloak✓

SuperTokens✓

What each one is

The product in its own terms, so the numbers below have context.

Keycloak

Leader

Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems.

Independently observed

SuperTokens

SuperTokens is an authentication infrastructure provider offering both open-source self-hosted deployment and managed cloud services. It provides ready-to-use authentication features including email/password, social login, passwordless methods, multi-factor authentication, and role-based access control.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Keycloak

Leader

Open sourceFree tier

Free, open-source software

as of 2026-08-14verify ↗

SuperTokens

HybridFree tier

Free self-hosted or free tier for cloud under 5K MAU, then $0.02/MAU for cloud. Add-ons from $0.005-$0.01/MAU plus dashboard users at $20/user/mo.

Cloud ManagedFree
- Email/password authentication
- Social login (Google, GitHub, Facebook, custom providers)
- Passwordless login (magic links, SMS/Email OTP)
- Session management
- User management dashboard
- +4 more
Self-Hosted Open SourceFree
- Email/password authentication
- Social login (Google, GitHub, Facebook, custom providers)
- Passwordless login (magic links, SMS/Email OTP)
- Session management
- RBAC
- +4 more

as of 2026-08-14verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Keycloak	SuperTokens
WebPlatforms	✓	✓
iOSPlatforms	✗	✓
AndroidPlatforms	✗	✓
WindowsPlatforms	✓	✗
LinuxPlatforms	✓	✗
CLIPlatforms	✓	✓
Cloud / SaaSDeployment	✓	✓
Self-hostedDeployment	✓	✓
On-premiseDeployment	✓	✗
HybridDeployment	✓	✓

Platforms

Web

Keycloak✓

SuperTokens✓

iOS

Keycloak✗

SuperTokens✓

Android

Keycloak✗

SuperTokens✓

Windows

Keycloak✓

SuperTokens✗

Linux

Keycloak✓

SuperTokens✗

CLI

Keycloak✓

SuperTokens✓

Deployment

Cloud / SaaS

Keycloak✓

SuperTokens✓

Self-hosted

Keycloak✓

SuperTokens✓

On-premise

Keycloak✓

SuperTokens✗

Hybrid

Keycloak✓

SuperTokens✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

In common (3)

GitHub
Google
Facebook

Keycloak

Leader

10 total - 7 not shared

Twitter
LDAP
Active Directory
Kerberos
Kubernetes
Apache APISIX
OpenTelemetry

Independently observed

SuperTokens

7 total - 4 not shared

Slack
Microsoft Teams
Email
SMS providers

Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.