Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Identity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Identity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Auth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
Multi-tenant identity platform with event-sourced audit trail and B2B organizations.
Authentication server with passkeys, passwords, social login and drop-in web components.
TypeScript authentication framework with email and social login, passkeys, two-factor, organizations and SSO plugins.
Headless identity and user-management server with an API-first design.
Lightweight OpenID Connect provider that signs users in to your apps with passkeys only.
Authentication backend with prebuilt UI, sessions and multi-tenancy.
Single sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
Headless identity and user-management server with an API-first design.
Alternative to
Will it still be around?
Stable
Score 78/100
Can a business use it freely?
Free to use
Apache-2.0 · open source (permissive)

has,doesn't4 features1 feature
5/11 Auth0 features free in Ory Kratos
Headline Auth0 features on the B2C Essentials plan, and whether Ory Kratos has each in its free, self-hosted edition.
| Feature | Auth0B2C Essentials plan | Ory Kratos5 of 11 free |
|---|---|---|
| Auth0 has, Ory Kratos doesn't4 | ||
| Hosted login pages | IncludedUniversal Login | PartlyBring your own UI; reference UI included |
| Roles and permissions | Included | PartlyThrough Ory Keto |
| User management console | Included | NoAPI only when self-hosted |
| OAuth 2.0 and OIDC provider | Included | PartlyThrough Ory Hydra |
| Ory Kratos has, Auth0 doesn't1 | ||
| Breached password detection | Higher planProfessional plan | YesHave I Been Pwned check |
| Both have4 | ||
| Social login | Included | Yes |
| Multi-factor authentication | Included | YesTOTP and WebAuthn |
| Passkeys and passwordless | Included | Yes |
| Custom code in login flows | IncludedActions | YesWebhooks in flows |
| Neither has fully2 | ||
| Enterprise SSO for your customers | Higher planSAML and OIDC connections, Professional | PartlyOIDC free; SAML on Ory Network |
| Machine-to-machine tokens | Higher planAdd-on | PartlyThrough Ory Hydra |
Sources
At 500 monthly active users, Auth0 (about $35 a month) is the cheaper choice. Switching to Ory Kratos on OpenTools saves money from 1,000 monthly active users.
Monthly cost
You save each month
−$4/mo
-11% less than today
Saving from month one
You save
List price checked 8 Oct 2026 · Source · Disclaimer
Stable · activity, bus factor and issue responsiveness, from GitHub
Score v2 · How it works
77/100
93/100
64/100
Free to use
Apache-2.0 · Open source (permissive)
What you need to do
Use, change, host and sell it for any purpose, commercial included, with no license to buy. Keep the copyright notice.
Apache License 2.0 · Open source (permissive). OSI-approved license with few conditions beyond keeping the copyright notice.
Detected by GitHub as Apache-2.0.
Snapshot from 2026-10-08 · Funding: patreon, open collective
No pull requests merged on GitHub since 10 October 2025. Some projects, such as Odoo, merge changes outside GitHub's merge button, so their contributors don't show here yet.