Skip to content
InfratoApp
InfratoApp / Resources / Open-source alternatives / KeyCloak

KeyCloak

keycloak/keycloak

An open-source alternative to Auth0.

Open Source Identity and Access Management For Modern Applications and Services (from the repository)

Stars
37,427
Licence
Apache-2.0
Last push
2026-10-19
Written in
Java

Is it alive?

Four readings from the repository, each with the rule behind it. No blended score.
Activity
Active
Last push 9 days ago
Active: pushed within 90 days. Slowing: within a year. Quiet: longer.
Releases
Recent
26.8.1, 15 days ago
Recent: a tagged release within six months. Some projects ship from the main branch and never tag.
Issues
87% closed
2,701 open · 18,135 closed
Share of all issues ever filed that are now closed. Under 20 issues is too few to read.
Momentum
+116 in 9 days
37,427 stars
Change in stars across our daily readings, over up to 30 days. Needs a week of readings.

What a business may do with it

PermissiveApache-2.0

Use, change and sell it, including inside a closed product. Keep the copyright notice.

This describes the licence family GitHub identified, not legal advice about this project. The repository’s own LICENSE file is what binds you.

Run it yourself

KeyCloak’s README does not show a docker run, docker compose up or helm install in a code block, so this page will not guess one. It may be a desktop app, a library, or documented on its website.

KeyCloak against the other open-source options

Every project offered against Auth0, most-starred first.
KeyCloak compared with other open-source alternatives
ProjectStarsActivityLicenceSelf-hostLanguage
KeyCloak (this page)37,427ActivePermissive○Java
Authelia29,307ActivePermissive○Go
Authentik26,005ActiveNot identified○Python
ORY17,617SlowingPermissive○Go
Supertokens15,349ActiveNot identified○Java
Zitadel15,345ActiveNetwork copyleft○Go
Hanko9,043ActiveNot identified○Go
Cerbos4,626ActivePermissive○Go
All open-source alternatives to Auth0 →

Where this page comes from

  • Stars, licence, activity, issues, releases and the self-host command are read from the repository. 2026-10-19
  • The pairing with Auth0 and the category come from opensourcealternative.to, a community directory of open-source alternatives. We re-read it weekly.
  • Star momentum comes from our own daily readings of the repository. How we collect data