compare
Apereo CAS vs Rauthy
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Apereo CAS | Rauthy |
|---|---|---|
| Language | Java | Rust |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 11k | 1.4k |
| Latest | v8.0.2 | v0.37.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 9 days between releases | about 33 days between releases |
| Active contributors | 5+ commit authors on the default branch in the last 90 days | 18 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Okta. Alternatives to Okta →
PartialApereo CASWeb single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.
PartialRauthyLightweight OpenID Connect provider with passkeys and MFA, without SAML.
Apereo CAS
- v8.1.0-RC22026-09-26Documentationpre-release
- v8.0.22026-09-26Documentation
- v7.3.8.32026-09-22Please see this post.
- v8.1.0-RC12026-08-28Documentationpre-release
- v7.3.8.22026-09-07Please see this post.
Rauthy
- v0.37.02026-10-03IF YOU DO NOT FOLLOW THE STEPS BELOW, YOU MIGHT END UP WITH INCONSISTENT DATA!
- v0.36.22026-08-08There were 2 reachable panics in certain situations. Especially in one case it was easy to abuse it for an unauthentica…
- v0.36.12026-07-24There was a security issue with Moderate severity during token refresh under some circumstances that allows cross-clien…
- v0.36.02026-07-06Technically, this is not a breaking change, but it might be for you. The config parser now has an additional validation…
- v0.35.22026-05-19This version bumps several 3rd party dependencies to fix CVEs in them. A timely update is advised.
Apereo CAS
unsigned The latest release, v8.0.2, carries no signature GitHub could verify.
Loading the security report
Rauthy
✓ signed The latest release, v0.37.0, carries a signature GitHub verified.
Loading the security report