compare
Keycloak vs Logto
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Keycloak | Logto |
|---|---|---|
| Language | Java | TypeScript |
| Licence | Apache-2.0 | MPL-2.0 |
| Stars | 37k | 15k |
| Latest | 26.8.0 | v1.44.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 14 days between releases | about 31 days between releases |
| Active contributors | 97+ commit authors on the default branch in the last 90 days | 22 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Auth0. Alternatives to Auth0 →
Full replacementKeycloakHosted login pages, social login and OpenID Connect for your applications.
Full replacementLogtoSign-in pages, social and enterprise SSO, MFA and organizations over OpenID Connect.
Keycloak
Logto
- v1.44.02026-09-30MFA trusted devices: After completing MFA, users can trust their browser and skip repeated MFA prompts on it. Admins se…
- v1.43.02026-08-31Sign-in Experience now supports es-MX (Spanish, Mexico).
- v1.42.02026-07-30Custom domain verification files: Serve small text or JSON verification files from your active custom domain, so third-…
- v1.41.02026-06-30App-level access control: Restrict application access by user, user role, organization, or organization role.
- v1.40.12026-05-29This is a patch release to correct a missed version bump for @logto/core-kit, again...
Keycloak
unsigned The latest release, 26.8.0, carries no signature GitHub could verify.
Loading the security report
Logto
✓ signed The latest release, v1.44.0, carries a signature GitHub verified.
Loading the security report