Open-source alternatives to Auth0
10 open-source projects are offered as replacements for Auth0. KeyCloak is the most starred. Running one yourself trades the subscription for your own hosting and upkeep, so the table below leads with what decides that trade: whether the project is alive, what its licence lets a business do, and whether there is a container command to start from.
Side by side
| Project | Stars | Activity | Licence | Self-host | Language |
|---|---|---|---|---|---|
 KeyCloak | 37,427 | Active | Permissive | ○ | Java |
 Authelia | 29,307 | Active | Permissive | ○ | Go |
 Authentik | 26,005 | Active | Not identified | ○ | Python |
 ORY | 17,617 | Slowing | Permissive | ○ | Go |
 Supertokens | 15,349 | Active | Not identified | ○ | Java |
 Zitadel | 15,345 | Active | Network copyleft | ○ | Go |
 Hanko | 9,043 | Active | Not identified | ○ | Go |
 Cerbos | 4,626 | Active | Permissive | ○ | Go |
 Fief | 717 | Slowing | Not identified | ○ | Python |
 Oso | 160 | Quiet | Not identified | ○ | TypeScript |
Each one, briefly
- KeyCloak37,427 stars · permissive · active
Open Source Identity and Access Management For Modern Applications and Services
- Authelia29,307 stars · permissive · active
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- ORY17,617 stars · permissive · slowing
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Also replaces Okta
- Supertokens15,349 stars · not identified · active
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
Also replaces Okta
- Zitadel15,345 stars · network copyleft · active
ZITADEL - Identity infrastructure, simplified for you.
Also replaces Okta
- Hanko9,043 stars · not identified · active
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
Also replaces Stytch
- Cerbos4,626 stars · permissive · active
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Also replaces Okta
Where this comes from
Which projects are offered against Auth0 comes from opensourcealternative.to, re-read weekly. Every figure in the table is read from the project’s own repository. We have not run these projects, and we hold no price for Auth0. Browse every open-source alternative.