# Keycloak vs Teleport

| Attribute | Keycloak | Teleport |
|---|---|---|
| **vioscaleAI score** | 65.4 (46% (low)) | 68.7 (71% (medium)) |
| activity.commits_last_30d | 100 | - |
| adoption.dependent_repos | 678 | - |
| adoption.github_stars | 37,140 | - |
| adoption.package_downloads_weekly | 998,112 | - |
| content.faq | `[{"answer":"Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems. It is indexed under Auth & Identity Software.","source":"https://www.keycloak.org","question":"What is Keycloak?","confidence":0.6},{"answer":"Keycloak is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://www.keycloak.org","question":"Is Keycloak free to use?","confidence":0.6},{"answer":"Keycloak supports the web, Windows, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.keycloak.org","question":"What platforms does Keycloak support?","confidence":0.6},{"answer":"Yes. Keycloak can be deployed on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.keycloak.org","question":"Can Keycloak be self-hosted?","confidence":0.6},{"answer":"We have confirmed 10 integrations for Keycloak, including GitHub, Google, Facebook, Twitter, LDAP, Active Directory, Kerberos and Kubernetes, plus 2 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.keycloak.org","question":"What does Keycloak integrate with?","confidence":0.6},{"answer":"Yes. Keycloak is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/keycloak/keycloak","question":"Is Keycloak open source?","confidence":0.95}]` | `[{"answer":"Teleport provides zero-trust identity and access control for servers, Kubernetes clusters, databases, cloud platforms, and AI agents. It offers unified authentication, role-based access control, session recording and audit logging, and just-in-time privilege elevation with short-lived certificates instead of long-lived secrets or VPNs. It is indexed under Privileged Access Management.","source":"https://goteleport.com/pricing/","question":"What is Teleport?","confidence":0.6},{"answer":"Teleport offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.","source":"https://goteleport.com/pricing/","question":"Is Teleport free?","confidence":0.6},{"answer":"Teleport supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://goteleport.com/pricing/","question":"What platforms does Teleport support?","confidence":0.6},{"answer":"Yes. Teleport can be deployed cloud / SaaS, hybrid and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://goteleport.com/pricing/","question":"Can Teleport be self-hosted?","confidence":0.6},{"answer":"We have confirmed 43 integrations for Teleport, including AWS Aurora, AWS CLI, AWS DynamoDB, AWS ElastiCache, AWS EKS, AWS IAM Identity Center, AWS Keyspaces and AWS Management Console, plus 35 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://goteleport.com/pricing/","question":"What does Teleport integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001, HIPAA and GDPR for Teleport. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Teleport not holding them. Always confirm compliance directly before you rely on it.","source":"https://goteleport.com/security/","question":"What security certifications does Teleport have?","confidence":0.7},{"answer":"Teleport is available worldwide. Its primary market is the United States.","source":"https://goteleport.com/pricing/","question":"Where is Teleport available?","confidence":0.5}]` |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` |
| description.long | An open-source identity management solution that allows users to authenticate once and gain access to multiple applications, eliminating the need for individual login handling at the application level. | Teleport provides zero-trust identity and access control for servers, Kubernetes clusters, databases, cloud platforms, and AI agents. It offers unified authentication, role-based access control, session recording and audit logging, and just-in-time privilege elevation with short-lived certificates instead of long-lived secrets or VPNs. |
| features.capabilities | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"iso_27001":true,"soc2_type_ii":true,"deployment_model":"hybrid","bundled_secrets_manager":false,"database_protocol_proxying":true,"just_in_time_jit_elevation":true,"short_lived_ssh_certificates":true,"kubernetes_kubectl_access_proxy":true,"ssh_rdp_session_video_recording":true,"servicenow_jira_ticketing_integration":true}` |
| integrations.count | 8 | 50 |
| integrations.list | `[{"name":"GitHub"},{"name":"Google"},{"name":"Facebook"},{"name":"Twitter"},{"name":"LDAP"},{"name":"Active Directory"},{"name":"Kerberos"},{"name":"Kubernetes"},{"name":"Apache APISIX"},{"name":"OpenTelemetry"},{"name":"OpenID Connect","native":true},{"name":"SAML 2.0","native":true}]` | `[{"name":"AWS Aurora"},{"name":"AWS CLI"},{"name":"AWS DynamoDB"},{"name":"AWS ElastiCache"},{"name":"AWS EKS"},{"name":"AWS IAM Identity Center"},{"name":"AWS Keyspaces"},{"name":"AWS Management Console"},{"name":"AWS MemoryDB"},{"name":"GCP Cloud SQL MySQL"},{"name":"GCP Cloud SQL PostgreSQL"},{"name":"Google Kubernetes Engine"},{"name":"Google Cloud Platform"},{"name":"Google Workspace"},{"name":"Microsoft Azure"},{"name":"Azure Kubernetes Service"},{"name":"Azure SQL Server"},{"name":"Azure MySQL"},{"name":"Azure PostgreSQL"},{"name":"Microsoft Active Directory"},{"name":"Kubernetes"},{"name":"Minikube"},{"name":"K3s"},{"name":"OpenShift"},{"name":"Elasticsearch"},{"name":"InfluxData"},{"name":"Snowflake"},{"name":"Slack"},{"name":"PagerDuty"},{"name":"GitHub"},{"name":"GitLab"},{"name":"Datadog"},{"name":"Docker"},{"name":"Helm"},{"name":"Retool"},{"name":"JupyterHub"},{"name":"Portworx"},{"name":"Crossplane"},{"name":"Tinkerbell"},{"name":"Windows Server"},{"name":"Linux (CentOS, Debian, RHEL, OpenSUSE, Scientific Linux)"},{"name":"SSH"},{"name":"Model Context Protocol (MCP)"},{"name":"Jira","native":true,"category":"ticketing"},{"name":"AWS","native":true,"category":"cloud","direction":"bidirectional"},{"name":"Azure","category":"cloud"},{"name":"Google Cloud","category":"cloud"},{"name":"Okta","category":"identity"},{"name":"Microsoft Entra ID","category":"identity"},{"name":"Auth0","category":"identity"},{"name":"Splunk","category":"siem"},{"name":"Terraform","category":"iac"},{"name":"Pulumi","category":"iac"}]` |
| language.primary | Java | - |
| license.spdx | Apache-2.0 | - |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"linux":true,"windows":true}` | `{"cli":true,"mac":true,"web":true,"linux":true,"windows":true}` |
| pricing | `{"type":"open_source","sourceUrl":"https://www.keycloak.org","retrievedAt":"2026-09-07T13:10:46.299Z"}` | `{"type":"usage","summary":"Usage-based pricing for active users and protected resources. Free tier and free trial available.","currency":"USD","freeTier":true,"sourceUrl":"https://goteleport.com/pricing/","retrievedAt":"2026-08-19T18:26:23.091Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | freemium |
| pricing.price_level | free | low |
| pricing.transparent | yes | no |
| release.cadence_days | 13 | - |
| release.history | `[{"url":"https://github.com/keycloak/keycloak/releases/tag/nightly","date":"2022-09-27T02:22:00Z","type":"prerelease","version":"nightly"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.8.0","date":"2026-10-01T05:57:20Z","type":"stable","version":"26.8.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.5","date":"2026-09-30T17:44:19Z","type":"stable","version":"26.7.5"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.4","date":"2026-09-16T14:44:06Z","type":"stable","version":"26.7.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.3","date":"2026-08-31T09:29:37Z","type":"stable","version":"26.7.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.2","date":"2026-08-19T05:26:20Z","type":"stable","version":"26.7.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.1","date":"2026-08-05T15:54:37Z","type":"stable","version":"26.7.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.0","date":"2026-07-09T06:58:13Z","type":"stable","version":"26.7.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.4","date":"2026-06-26T19:19:51Z","type":"stable","version":"26.6.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.3","date":"2026-06-04T17:00:13Z","type":"stable","version":"26.6.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.2","date":"2026-05-19T12:41:03Z","type":"stable","version":"26.6.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.1","date":"2026-04-15T13:58:02Z","type":"stable","version":"26.6.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.0","date":"2026-04-08T08:54:19Z","type":"stable","version":"26.6.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.7","date":"2026-04-02T14:47:13Z","type":"stable","version":"26.5.7"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.6","date":"2026-03-19T06:45:39Z","type":"stable","version":"26.5.6"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.5","date":"2026-03-05T15:40:30Z","type":"stable","version":"26.5.5"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.4","date":"2026-02-20T09:19:45Z","type":"stable","version":"26.5.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.3","date":"2026-02-10T07:30:08Z","type":"stable","version":"26.5.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.2","date":"2026-01-23T14:26:58Z","type":"stable","version":"26.5.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.1","date":"2026-01-14T18:09:13Z","type":"stable","version":"26.5.1"}]` | - |
| reliability.status_page | - | yes |
| security.certifications | - | `[{"name":"SOC 2 Type II","level":"Type II","status":"active"},{"name":"ISO 27001","status":"active"},{"name":"HIPAA Security Rule","status":"active"},{"name":"FedRAMP Moderate","level":"Moderate","status":"active"},{"name":"FIPS 140-2","status":"active"}]` |
| security.disclosure_policy | yes | yes |
| security.fedramp | - | yes |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.scorecard | 9.3 | - |
| security.soc2 | - | yes |
| security.trust_center | https://www.keycloak.org/security | https://goteleport.com/security/ |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-server-spi&per_page=100","last_12m":0,"max_severity":null}` | - |

*Source: vioscaleAI. Generated 2026-10-20T07:44:02.250Z. "-" = undocumented, not absent.*