authentik vs Keycloak vs Vaultwarden
authentik, Keycloak, Vaultwarden compared on license, free-edition limits, deployment and project health. Change a project below to compare something else.
| authentik | Keycloak | Vaultwarden | |
|---|---|---|---|
| Category | Security | Security | Security |
| License | MIT LicenseOpen source (OSI) | Apache License 2.0Open source (OSI) | GNU Affero General Public License v3.0Open source (OSI) |
| Free edition | Some features paywalled | Not confirmed | Not confirmed |
| Deployment | Self-hosted | Self-hosted | Self-hosted |
| Self-hosting setup | Needs a database | Needs a database | Single container |
| SSO / SAML | Free | Free | Not confirmed |
| Role-based access control | Not confirmed | Free | Free |
| Audit logs | Not confirmed | Free | Free |
| Multi-user / teams | Not confirmed | Free | Free |
| Backups and restore | Not confirmed | Not confirmed | Not confirmed |
| API access | Free | Free | Free |
| Support SLA | Paid | Not confirmed | Not confirmed |
| GitHub stars | 26k | 37k | 69k |
| Last release | Sep 17, 2026 | Oct 1, 2026 | Oct 5, 2026 |
| Alternative to | Auth0, Okta | Auth0, Okta | 1Password, Bitwarden |
In short
- authentik is licensed MIT License (open source (osi)). Free edition: some features paywalled.
- Keycloak is licensed Apache License 2.0 (open source (osi)). Free edition: not confirmed.
- Vaultwarden is licensed GNU Affero General Public License v3.0 (open source (osi)). Free edition: not confirmed.
Each project page lists the official sources behind these answers. Where the official pages do not say, the table shows “Not confirmed”.