# Auth0 vs Keycloak

**Leader by Vioscale score:** Auth0

| Attribute | Auth0 | Keycloak |
|---|---|---|
| **Vioscale score** | 88.5 (72% (medium)) | 71.8 (47% (low)) |
| activity.commits_last_30d | - | 100 |
| adoption.dependent_repos | - | 1,153 |
| adoption.github_stars | - | 36,428 |
| adoption.package_downloads_weekly | - | 1,713,825 |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` |
| description.long | A managed authentication service that handles user identity verification, single sign-on, and API security. Supports passwordless login, multi-factor authentication, role-based access control, and machine-to-machine authentication with enterprise-grade features for compliance and security. | Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems. |
| features.capabilities | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"cloud","saml_sso":true,"hosted_ui":"both","open_source":false,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` |
| integrations.count | 14 | 10 |
| integrations.list | `[{"name":"Datadog"},{"name":"Splunk"},{"name":"AWS"},{"name":"Azure"},{"name":"Slack"},{"name":"Segment"},{"name":"Salesforce"},{"name":"Tealium"},{"name":"Web3Auth"},{"name":"Spruce ID"},{"name":"Unstoppable Domains"},{"name":"Dock.io"},{"name":"Ethereum Name Service"},{"name":"NFT services"}]` | `[{"name":"GitHub"},{"name":"Google"},{"name":"Facebook"},{"name":"Twitter"},{"name":"LDAP"},{"name":"Active Directory"},{"name":"Kerberos"},{"name":"Kubernetes"},{"name":"Apache APISIX"},{"name":"OpenTelemetry"}]` |
| language.primary | - | Java |
| license.spdx | - | Apache-2.0 |
| market.availability | `{"hqCountry":"US","primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"ios":true,"web":true,"android":true}` | `{"cli":true,"web":true,"linux":true,"windows":true}` |
| pricing | `{"type":"subscription","plans":[{"free":true,"name":"Free","summary":"Free, up to 25,000 monthly active users","features":["1 Custom Domain","Passwordless Authentication","Unlimited Social Connections","5 Organizations","Brand Customization","Basic Attack Protection","Community Support","1 Enterprise Connection","Self-Service SSO","SCIM"],"commitment":"monthly","components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"For getting started with authentication","contactSales":false,"includedLimits":{"monthly_active_users":"25000"}},{"free":false,"name":"Essentials","summary":"$35/month, up to 500 monthly active users","features":["Everything in Free","Higher Auth and API limits","Pro Multi-Factor Authentication","Role-based Access Control per Organization","10 Organizations","Stream Audit Logs to Datadog, Splunk, AWS, Azure","Separate Production & Development Environments","Standard Support"],"commitment":"monthly","components":[{"kind":"fixed","amount":35,"period":"month","currency":"USD"}],"description":"For projects with higher production demands","contactSales":false,"includedLimits":{"monthly_active_users":"500"}},{"free":false,"name":"Professional","summary":"$240/month, up to 500 monthly active users","features":["Everything in Essentials","Use existing User Database for Logins","Enterprise Multi-Factor Authentication","Enhanced Attack Protection","Machine-to-Machine Tokens"],"commitment":"monthly","components":[{"kind":"fixed","amount":240,"period":"month","currency":"USD"}],"description":"For teams and projects that need added security","contactSales":false,"includedLimits":{"monthly_active_users":"500"}},{"free":false,"name":"Enterprise","summary":"Custom pricing with 99.99% SLA and enterprise support","features":["Everything in Professional","Custom User & SSO Tiers","99.99% SLA","Enterprise Rate Limits","Enterprise Administration & Support","Advanced Security Features"],"description":"For enterprises needing to scale with top-tier support","contactSales":true}],"addOns":[{"name":"Private Deployment"},{"name":"Machine-to-Machine (M2M) Add-on"}],"summary":"Free tier up to 25k MAU, then $35–$240/month. Pricing based on monthly active users.","currency":"USD","freeTier":true,"sourceUrl":"https://auth0.com/pricing","retrievedAt":"2026-08-14T12:15:50.906Z","startingPrice":{"amount":35,"period":"month","currency":"USD"},"billingPeriods":["month"]}` | `{"type":"open_source","summary":"Free, open-source software","freeTier":true,"sourceUrl":"https://www.keycloak.org","retrievedAt":"2026-08-14T13:39:48.793Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | freemium | open_source |
| pricing.price_level | mid | free |
| pricing.transparent | yes | yes |
| release.cadence_days | - | 13 |
| release.history | - | `[{"url":"https://github.com/keycloak/keycloak/releases/tag/nightly","date":"2022-09-27T02:22:00Z","type":"prerelease","version":"nightly"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.2","date":"2026-08-19T05:26:20Z","type":"stable","version":"26.7.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.1","date":"2026-08-05T15:54:37Z","type":"stable","version":"26.7.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.7.0","date":"2026-07-09T06:58:13Z","type":"stable","version":"26.7.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.4","date":"2026-06-26T19:19:51Z","type":"stable","version":"26.6.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.3","date":"2026-06-04T17:00:13Z","type":"stable","version":"26.6.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.2","date":"2026-05-19T12:41:03Z","type":"stable","version":"26.6.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.1","date":"2026-04-15T13:58:02Z","type":"stable","version":"26.6.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.6.0","date":"2026-04-08T08:54:19Z","type":"stable","version":"26.6.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.7","date":"2026-04-02T14:47:13Z","type":"stable","version":"26.5.7"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.6","date":"2026-03-19T06:45:39Z","type":"stable","version":"26.5.6"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.5","date":"2026-03-05T15:40:30Z","type":"stable","version":"26.5.5"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.4","date":"2026-02-20T09:19:45Z","type":"stable","version":"26.5.4"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.3","date":"2026-02-10T07:30:08Z","type":"stable","version":"26.5.3"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.2","date":"2026-01-23T14:26:58Z","type":"stable","version":"26.5.2"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.1","date":"2026-01-14T18:09:13Z","type":"stable","version":"26.5.1"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.5.0","date":"2026-01-06T07:42:32Z","type":"stable","version":"26.5.0"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.4.7","date":"2025-12-01T08:14:11Z","type":"stable","version":"26.4.7"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.4.6","date":"2025-11-25T17:32:43Z","type":"stable","version":"26.4.6"},{"url":"https://github.com/keycloak/keycloak/releases/tag/26.4.5","date":"2025-11-12T15:24:23Z","type":"stable","version":"26.4.5"}]` |
| reliability.sla_pct | 99.99 | - |
| reliability.status_page | yes | - |
| security.disclosure_policy | yes | yes |
| security.fedramp | yes | - |
| security.gdpr | yes | - |
| security.hipaa | yes | - |
| security.iso27001 | yes | - |
| security.pci | yes | - |
| security.scorecard | - | 7.9 |
| security.soc2 | yes | - |
| security.vulnerabilities | - | `{"count":58,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-core&per_page=100","last_12m":0,"max_severity":"CRITICAL"}` |

## Capabilities (Auth & Identity Software)

| Capability | Auth0 | Keycloak |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud only | Cloud + self-hosted |
| **Methods** |  |  |
| Social login | ✓ | ✓ |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | ✓ | ✓ |
| Multi-factor auth | ✓ | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✓ | ✓ |
| SCIM provisioning | ✓ | ✓ |
| B2B / multi-tenancy | ✓ | ✓ |
| **Standards** |  |  |
| OpenID Connect provider | ✓ | ✓ |
| **Delivery** |  |  |
| Hosted UI | Both | Both |
| **Access** |  |  |
| RBAC | ✓ | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✗ | ✓ |

*Source: Vioscale. Generated 2026-09-01T14:56:22.419Z. "-" = undocumented, not absent.*