compare
authentik vs Keycloak
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | authentik | Keycloak |
|---|---|---|
| Language | Python | Java |
| Licence | Other | Apache-2.0 |
| Stars | 26k | 37k |
| Latest | version/2026.8.3 | 26.8.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 4 days between releases | about 14 days between releases |
| Active contributors | 38+ commit authors on the default branch in the last 90 days | 97+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
authentik replaces Keycloak. Alternatives to Keycloak →
Full replacementFlows and policies edited in a web UI, plus an outpost proxy for apps without SSO.
Both replace Auth0. Alternatives to Auth0 →
Full replacementauthentikLogin flows, social login and OpenID Connect for your applications.
Full replacementKeycloakHosted login pages, social login and OpenID Connect for your applications.
Both replace Okta. Alternatives to Okta →
Full replacementauthentikSSO over OpenID Connect, SAML, LDAP and a forward-auth proxy, with visual flows.
Full replacementKeycloakSSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.
authentik
- version/2026.8.32026-09-17Release 2026.8.3
- version/2026.8.22026-09-09Release 2026.8.2
- version/2026.5.72026-09-09Release 2026.5.7
- version/2026.2.72026-09-09Release 2026.2.7
- version/2026.8.12026-09-01Release 2026.8.1
authentik
unsigned The latest release, version/2026.8.3, carries no signature GitHub could verify.
Loading the security report
Keycloak
unsigned The latest release, 26.8.0, carries no signature GitHub could verify.
Loading the security report