Keycloak
Centralized authentication and authorization platform enabling single sign-on across applications
- Also known as
- keycloak
Available worldwide
What is Keycloak?
An open-source identity management solution that allows users to authenticate once and gain access to multiple applications, eliminating the need for individual login handling at the application level.
Keycloak pricing
We don't have Keycloak's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.
What Keycloak does
The capabilities that matter for auth & identity software, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.
- Hosting
- Cloud + self-hosted
- Social login
- ✓
- Passwordless
- ✓
- Passkeys / WebAuthn
- ✓
- Multi-factor auth
- ✓
- SAML SSO
- ✓
- SCIM provisioning
- ✓
- B2B / multi-tenancy
- ✓
- OpenID Connect provider
- ✓
- Hosted UI
- Both
- RBAC
- ✓
- Self-hostable OSS core
- ✓
Platform & deployment
Independently observed- CLI
- Linux
- Windows
- Cloud / SaaS
- Self-hosted
Integrations (12)
Independently observed- GitHub
- LDAP
- Active Directory
- Kerberos
- Kubernetes
- Apache APISIX
- OpenTelemetry
- OpenID Connect•
- SAML 2.0•
Security & compliance
Known vulnerabilities: 0 (0 in the last 12 months) sourcea count reflects scale & disclosure, not quality
Keycloak FAQ
Common questions about Keycloak, answered from independent, dated evidence.
What is Keycloak?
Centralized authentication and authorization platform that manages user identity and access control across applications, reducing the need for individual apps to build their own login systems. It is indexed under Auth & Identity Software.
Source: https://www.keycloak.org
Is Keycloak free to use?
Keycloak is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.
Source: https://www.keycloak.org
What platforms does Keycloak support?
Keycloak supports the web, Windows, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.
Source: https://www.keycloak.org
Can Keycloak be self-hosted?
Yes. Keycloak can be deployed on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.
Source: https://www.keycloak.org
What does Keycloak integrate with?
We have confirmed 10 integrations for Keycloak, including GitHub, Google, Facebook, Twitter, LDAP, Active Directory, Kerberos and Kubernetes, plus 2 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.
Source: https://www.keycloak.org
Is Keycloak open source?
Yes. Keycloak is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.
Keycloak alternatives
Other auth & identity software we track, ranked by the same independent score.
- Fronteggmedium · 73%
- DescopeUnified identity management platform for customers, partners, and AI agentsmedium · 71%
- Auth0A comprehensive identity and access management platform that simplifies user authentication and authorization across applicationsmedium · 72%
- AWS CognitoA managed cloud service for authenticating users and machines at scale across applicationsmedium · 73%
- WorkOSEnterprise-grade identity and access management for applicationsmedium · 71%
- ClerkAuthentication and user management platform with organizational and billing featuresmedium · 71%
Compare Keycloak
Side by side against other auth & identity software, attribute by attribute, with a source on every value.
The vioscaleAI score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Keycloak, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Package downloads | 78 | 0.14 | 10.6 | ✓ |
| Capabilities | 100 | 0.06 | 6.3 | ✓ |
| Development activity | 63 | 0.09 | 5.9 | ✓ |
| Release cadence | 93 | 0.05 | 4.8 | ✓ |
| Security score | 93 | 0.04 | 3.9 | ✓ |
| Dependent projects | 47 | 0.06 | 3.0 | ✓ |
| Stars | 86 | 0.03 | 2.2 | ✓ |
| Integrations | 27 | 0.06 | 1.7 | ✓ |
| Security posture | 5 | 0.21 | 0.0 | - |
| Developer Q&A activity | 0 | 0.06 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Activity
| Attribute | Value | Evidence |
|---|---|---|
| Commits last 30d | 100 | mediumsource · 2026-10-05 · 65% |
Adoption
Content
| Attribute | Value | Evidence |
|---|---|---|
| Faq | 6 items | mediumsource · 2026-09-10 · 66% |
Features
| Attribute | Value | Evidence |
|---|---|---|
| Capabilities | Mfa: Yes · Oidc: Yes · Rbac: Yes · Hosting: both · Saml sso: Yes · Hosted ui: both | mediumsource · 2026-10-05 · 60% |
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 8 | mediumsource · 2026-10-05 · 60% |
Language
| Attribute | Value | Evidence |
|---|---|---|
| Primary | Java | mediumsource · 2026-10-05 · 63% |
License
| Attribute | Value | Evidence |
|---|---|---|
| Spdx | Apache-2.0 | mediumsource · 2026-10-05 · 67% |
Market
| Attribute | Value | Evidence |
|---|---|---|
| Availability | PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: … | highsource · 2026-08-14 · 75% |
Pricing
Release
Security
| Attribute | Value | Evidence |
|---|---|---|
| Disclosure policy | Yes | mediumsource · 2026-09-07 · 60% |
| Scorecard | 9.3 | highsource · 2026-10-05 · 90% |
| Vulnerabilities | Count: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.keycloak%3Akeycloak-server-spi&per_page=100 · Last 12m: 0 | highsource · 2026-10-05 · 90% |
| Trust center | https://www.keycloak.org/security | mediumsource · 2026-10-05 · 60% |
Is Keycloak the right choice for you?
Tell us the job, the constraints and what you weigh most, and we will rank Keycloak against the rest of the auth & identity software we index, using the same dated evidence weighted your way.
Free to run, no account needed to start. How the evaluation works
Is this your product?
This profile was built from public sources without asking you. You can take the badge below and use it anywhere, and you can claim the profile to correct anything we got wrong. Both are free, and neither moves Keycloak up or down: nobody can buy rank here, including you.
Take the badge
Live, always current, and free to use on your own site. It shows Keycloak's independent score and links back to this profile.
<a href="https://www.vioscale.ai/software/keycloak" target="_blank" rel="noopener">
<img src="https://www.vioscale.ai/badge/software/keycloak.svg" alt="Keycloak, verified on vioscaleAI" width="330" height="76" loading="lazy" />
</a>Markdown, for a README →
[](https://www.vioscale.ai/software/keycloak)Claim the profile
Verify you control the domain, then point us at the pages that state the facts about Keycloak and add your own description and media. Free, and it does not change the score.
- Correct anything wrong, with evidence
- Point our crawler at the pages that matter
- Write your own description and add media
Not the owner? How vendor profiles work