# Authentik vs Kinde

**Leader by Vioscale score:** Kinde

| Attribute | Authentik | Kinde |
|---|---|---|
| **Vioscale score** | 54.3 (40% (low)) | 68.8 (70% (medium)) |
| activity.commits_last_30d | 100 | - |
| adoption.dependent_repos | 0 | - |
| adoption.github_stars | 25,174 | - |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | An open-source identity provider offering single sign-on, multi-factor authentication, role-based access control, and application integration capabilities. Organizations can deploy it on their own infrastructure as a self-hosted alternative to commercial solutions. | A developer-centric platform that provides authentication (passwordless, social login, SSO, MFA), subscription billing integration, and feature flags to help SaaS teams build and monetize products with security built in. |
| features.capabilities | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"open_source":true,"passwordless":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"mfa":true,"saml_sso":true,"passwordless":true,"social_login":true}` |
| integrations.count | 10 | 5 |
| integrations.list | `[{"name":"OAuth2"},{"name":"OpenID Connect"},{"name":"SAML2"},{"name":"LDAP"},{"name":"RADIUS"},{"name":"SCIM"},{"name":"WS-Federation"},{"name":"Microsoft Entra ID"},{"name":"Google Workspace"},{"name":"Shared Signals Framework (SSF)"}]` | `[{"name":"Stripe"},{"name":"TrustPath.io"},{"name":"Entra ID"},{"name":"SAML"},{"name":"GitHub Actions"}]` |
| language.primary | Python | - |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"mac":true,"web":true,"linux":true,"windows":true}` | `{"ios":true,"web":true,"android":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Open Source","features":["Self-hosting on Docker, Kubernetes, Terraform","OAuth2/OIDC","SAML2","LDAP","RADIUS","SCIM","MFA (TOTP, WebAuthn)","Passkeys/WebAuthn","Remote Access Control (RDP, SSH, VNC)","RBAC","Conditional Access"],"description":"Free open source core with community support","contactSales":false},{"free":false,"name":"Professional","components":[{"kind":"fixed","amount":1000,"period":"year","currency":"USD"}],"description":"Enterprise features available. Annual subscriptions over $1,000 include support ticketing (response within 1-3 business days)","contactSales":false},{"free":false,"name":"Enterprise","components":[{"kind":"fixed","amount":20000,"period":"year","currency":"USD"}],"description":"Custom contracts with dedicated support team, biweekly check-ins, and prioritized feature requests","contactSales":true}],"summary":"Free open source. Professional plans from $1,000/year with support. Enterprise from $20,000/year with dedicated support.","currency":"USD","freeTier":true,"sourceUrl":"https://goauthentik.io/blog/2025-02-04-open-source-rac-and-pricing-support-updates/","retrievedAt":"2026-08-14T08:33:07.076Z","startingPrice":{"amount":1000,"period":"month","currency":"USD"}}` | `{"type":"subscription","plans":[{"free":false,"name":"Starter","summary":"$25/month","features":["1 True Clone™","10 virtual clones","Unlimited email support","Patented no-impersonation technology™","Free feature flags"],"commitment":"monthly","components":[{"kind":"fixed","amount":25,"period":"month","currency":"USD"}],"contactSales":false}],"summary":"From $25/month. Free tier available.","currency":"USD","freeTier":true,"sourceUrl":"https://kinde.com/learn/billing/billing-for-ai/ai-token-pricing-optimization-dynamic-cost-management-for-llm-powered-saas/","retrievedAt":"2026-08-14T08:30:15.037Z","startingPrice":{"amount":25,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | high | mid |
| pricing.transparent | yes | yes |
| release.history | `[{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0","date":"2026-08-18T22:04:25Z","type":"stable","version":"version/2026.8.0"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc7","date":"2026-08-10T22:16:59Z","type":"prerelease","version":"version/2026.8.0-rc7"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc6","date":"2026-08-03T22:43:11Z","type":"prerelease","version":"version/2026.8.0-rc6"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc5","date":"2026-08-03T20:14:23Z","type":"prerelease","version":"version/2026.8.0-rc5"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc4","date":"2026-08-03T18:59:58Z","type":"prerelease","version":"version/2026.8.0-rc4"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc3","date":"2026-08-03T17:49:08Z","type":"prerelease","version":"version/2026.8.0-rc3"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc2","date":"2026-08-03T16:34:28Z","type":"prerelease","version":"version/2026.8.0-rc2"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc1","date":"2026-08-03T15:04:52Z","type":"prerelease","version":"version/2026.8.0-rc1"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.6","date":"2026-07-22T14:52:57Z","type":"stable","version":"version/2026.5.6"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.5","date":"2026-07-15T17:15:23Z","type":"stable","version":"version/2026.5.5"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.2.6","date":"2026-07-15T17:14:01Z","type":"stable","version":"version/2026.2.6"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.4","date":"2026-07-08T01:29:03Z","type":"stable","version":"version/2026.5.4"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.2.5","date":"2026-07-07T16:56:46Z","type":"stable","version":"version/2026.2.5"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.3","date":"2026-06-10T18:33:55Z","type":"stable","version":"version/2026.5.3"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.2","date":"2026-05-28T15:13:31Z","type":"stable","version":"version/2026.5.2"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.2.4","date":"2026-05-28T15:04:46Z","type":"stable","version":"version/2026.2.4"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2025.12.6","date":"2026-05-28T15:00:00Z","type":"stable","version":"version/2025.12.6"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.0","date":"2026-05-22T00:40:51Z","type":"stable","version":"version/2026.5.0"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.5.0-rc2","date":"2026-05-13T08:42:06Z","type":"prerelease","version":"version/2026.5.0-rc2"},{"url":"https://github.com/goauthentik/authentik/releases/tag/version/2026.2.3","date":"2026-05-12T19:55:59Z","type":"stable","version":"version/2026.2.3"}]` | - |
| reliability.status_page | yes | yes |
| security.disclosure_policy | yes | yes |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.soc2 | - | yes |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40goauthentik%2Fprettier-config&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (Auth & Identity Software)

| Capability | Authentik | Kinde |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | - |
| **Methods** |  |  |
| Social login | - | ✓ |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | ✓ | - |
| Multi-factor auth | ✓ | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✓ | ✓ |
| SCIM provisioning | ✓ | - |
| B2B / multi-tenancy | ✓ | - |
| **Standards** |  |  |
| OpenID Connect provider | ✓ | - |
| **Delivery** |  |  |
| Hosted UI | - | - |
| **Access** |  |  |
| RBAC | ✓ | - |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | - |

*Source: Vioscale. Generated 2026-09-01T14:37:20.016Z. "-" = undocumented, not absent.*