authentik vs ZITADEL

authentik vs ZITADEL
Fact	authentik	ZITADEL
Language	Python	Go
Licence	Other	AGPL-3.0
Stars	26k	15k
Latest	version/2026.8.3	v4.19.4
Last push	2026-10-06	2026-10-06
Release cadence	about 4 days between releases	about 2 days between releases
Active contributors	38+ commit authors on the default branch in the last 90 days	20 commit authors on the default branch in the last 90 days
Flags	none	none

How they relate

Both replace Auth0. Alternatives to Auth0 →
Full replacementauthentikLogin flows, social login and OpenID Connect for your applications.
Full replacementZITADELMulti-tenant login, OpenID Connect, SAML and passkeys, built for B2B apps.
Both replace Okta. Alternatives to Okta →
Full replacementauthentikSSO over OpenID Connect, SAML, LDAP and a forward-auth proxy, with visual flows.
PartialZITADELSSO for your own applications rather than a workforce app catalogue.

v4.19.42026-10-01actions: set instance ID in async execution worker context (#12730) (03a2469), closes #11985
v4.19.32026-09-29query: index users14 by instance and org (#12830) (d378dea), closes #12826
v4.19.22026-09-28This release fixes three security vulnerabilities. We recommend all 4.x deployments upgrade.
v4.19.12026-09-23setup step 79 batch unique constraint owner backfill (#12803) (42cdd5d)
v4.19.02026-09-23eventstore: omit owners on empty unique constraint inserts (#12785) (6308539), closes #12740 #12780 #12740

unsigned The latest release, version/2026.8.3, carries no signature GitHub could verify.

Loading the security report

✓ signed The latest release, v4.19.4, carries a signature GitHub verified.

Loading the security report