Comparison

Keycloak vs Zitadel

On the evidence we track, Keycloak leads this comparison with a composite score of 72/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Keycloak full profile →Zitadel full profile →

Machine formatsJSON Markdown GraphQLor send Accept: application/json

★Keycloak72

Zitadel65

Attribute comparison across 2 tools
Attribute	KeycloakLeader	Zitadel
Vioscale score	72 / 100low · 47%	65 / 100low · 46%
Pricing
Free tierpricing.free_tier	✓	✓
Modelpricing.model	open_source	freemium
Price levelpricing.price_level	free	high
Transparentpricing.transparent	✓	✓
Integrations
Countintegrations.count	10	12
Security
Disclosure policysecurity.disclosure_policy	✓	✓
Gdprsecurity.gdpr	-	✓
Scorecardsecurity.scorecard	7.9	-
Vulnerabilitiessecurity.vulnerabilities	Count: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL	Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=helm&package_name=zitadel%2Fzitadel&per_page=100 · Last 12m: 0
Reliability
Sla pctreliability.sla_pct	-	99.99
Status pagereliability.status_page	-	✓
Adoption
Dependent reposadoption.dependent_repos	1,153	0
Github starsadoption.github_stars	36,428	14,862
Package downloads weeklyadoption.package_downloads_weekly	1,713,825	-
Activity
Commits last 30dactivity.commits_last_30d	100	42
Release
Cadence daysrelease.cadence_days	13	5
Historyrelease.history	20 items	20 items
License
Spdxlicense.spdx	Apache-2.0	AGPL-3.0
Language
Primarylanguage.primary	Java	Go
Market
Availabilitymarket.availability	Available worldwide	Available in US, AU, CH · Popular in US, EU · HQ CH

Score

Vioscale score

Keycloak72 / 100low · 47%

Zitadel65 / 100low · 46%

Pricing

Free tier

Keycloak✓

Zitadel✓

Model

Keycloakopen_source

Zitadelfreemium

Price level

Keycloakfree

Zitadelhigh

Transparent

Keycloak✓

Zitadel✓

Integrations

Count

Keycloak10

Zitadel12

Security

Disclosure policy

Keycloak✓

Zitadel✓

Gdpr

Keycloak–

Zitadel✓

Scorecard

Keycloak7.9

Zitadel–

Vulnerabilities

KeycloakCount: 58 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100 · Last 12m: 0 · Max severity: CRITICAL

ZitadelCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=helm&package_name=zitadel%2Fzitadel&per_page=100 · Last 12m: 0

Reliability

Sla pct

Keycloak–

Zitadel99.99

Status page

Keycloak–

Zitadel✓

Adoption

Dependent repos

Keycloak1,153

Zitadel0

Github stars

Keycloak36,428

Zitadel14,862

Package downloads weekly

Keycloak1,713,825

Zitadel–

Activity

Commits last 30d

Keycloak100

Zitadel42

Release

Cadence days

Keycloak13

Zitadel5

History

Keycloak20 items

Zitadel20 items

License

Spdx

KeycloakApache-2.0

ZitadelAGPL-3.0

Language

Primary

KeycloakJava

ZitadelGo

Market

Availability

KeycloakAvailable worldwide

ZitadelAvailable in US, AU, CH · Popular in US, EU · HQ CH

Capabilities

Feature-by-feature on the axes that matter for auth & identity software. “-” means undocumented, not absent.

Capability comparison for Auth & Identity Software
Capability	Keycloak	Zitadel
Deployment
Hosting	Cloud + self-hosted	Cloud + self-hosted
Methods
Social login	✓	✓
Passwordless	✓	✓
Passkeys / WebAuthn	✓	✓
Multi-factor auth	✓	✓
Enterprise
SAML SSO	✓	✓
SCIM provisioning	✓	✓
B2B / multi-tenancy	✓	✓
Standards
OpenID Connect provider	✓	✓
Delivery
Hosted UI	Both	Both
Access
RBAC	✓	✓
Licensing
Self-hostable OSS core	✓	✓

Deployment

Hosting

KeycloakCloud + self-hosted

ZitadelCloud + self-hosted

Methods

Social login

Keycloak✓

Zitadel✓

Passwordless

Keycloak✓

Zitadel✓

Passkeys / WebAuthn

Keycloak✓

Zitadel✓

Multi-factor auth

Keycloak✓

Zitadel✓

Enterprise

SAML SSO

Keycloak✓

Zitadel✓

SCIM provisioning

Keycloak✓

Zitadel✓

B2B / multi-tenancy

Keycloak✓

Zitadel✓

Standards

OpenID Connect provider

Keycloak✓

Zitadel✓

Delivery

Hosted UI

KeycloakBoth

ZitadelBoth

Access

RBAC

Keycloak✓

Zitadel✓

Licensing

Self-hostable OSS core

Keycloak✓

Zitadel✓

What each one is

The product in its own terms, so the numbers below have context.

Keycloak

Leader

Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems.

Independently observed

Zitadel

A multi-tenant, API-first identity and access management platform offering single sign-on, multi-factor authentication, passkeys, and complete audit trails. Available as a managed cloud service or self-hosted deployment, designed for developers building secure SaaS and B2B applications.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Keycloak

Leader

Open sourceFree tier

Free, open-source software

as of 2026-08-14verify ↗

Zitadel

from $100/moHybridFree tier

Free tier available. Pro plan from $100/month with 25,000 DAU included. Usage-based overage pricing for additional capacity.

FreeFree
- 100 daily active users
- 3 external identity providers
- 5,000 management API requests
- Community support
- 1 management instance
Pro$100/month including 25,000 DAU and 500,000 API requests; overage pricing available
- 25,000 daily active users
- 500,000 management API requests
- 3 external identity providers
- Multifactor authentication
- Passkeys/WebAuthn
- +5 more
EnterpriseContact sales
- Custom scaling
- Custom compliance
- Custom security questionnaires
- Custom contract and MSA
- Up to 99.99% availability SLA
- +1 more

as of 2026-08-14verify ↗

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platform and deployment support comparison
Supports	Keycloak	Zitadel
WebPlatforms	✓	✓
WindowsPlatforms	✓	✗
LinuxPlatforms	✓	✗
CLIPlatforms	✓	✗
Cloud / SaaSDeployment	✓	✓
Self-hostedDeployment	✓	✓
On-premiseDeployment	✓	✗
HybridDeployment	✓	✓

Platforms

Web

Keycloak✓

Zitadel✓

Windows

Keycloak✓

Zitadel✗

Linux

Keycloak✓

Zitadel✗

CLI

Keycloak✓

Zitadel✗

Deployment

Cloud / SaaS

Keycloak✓

Zitadel✓

Self-hosted

Keycloak✓

Zitadel✓

On-premise

Keycloak✓

Zitadel✗

Hybrid

Keycloak✓

Zitadel✓

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

In common (3)

GitHub
Google
LDAP

Keycloak

Leader

10 total - 7 not shared

Facebook
Twitter
Active Directory
Kerberos
Kubernetes
Apache APISIX
OpenTelemetry

Independently observed

Zitadel

12 total - 9 not shared

Microsoft
SAML 2.0
SCIM 2.0
OpenID Connect
gRPC
connectRPC
REST API
Webhooks
Actions

Independently observed

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.