Dev tools · alternatives · 2026
24 alternatives to KEYCLOAK
Open Source Identity and Access Management - Login
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. KEYCLOAK launched in 2020; newer entries below may have overtaken it.
- 1

- 2

Hey HN! After 6 years of R&D, our small team is excited to share our project TideCloak - an IAM designed to help developers move fast without worrying about catastrophic breaches or overpowered admins with keys to the kingdom. Traditional IAMs rely on centralized authority - admins, root certificates, and decryption keys - which create glaring vulnerabilities in a breach. To address this, we’ve integrated Keycloak (Red Hat’s IAM) with a decentralized key architecture powered by our (academically validated) Ineffable Cryptography. Here’s the idea: keys are split across a decentralized network…
2024 · github.com · its alternatives →
- 3

- 4KS
Hi HN! I built KeyPub.sh to solve the problem of user verification for CLI applications. It's essentially OAuth for the terminal, but using SSH keys that developers and users already have. - No installation needed - works with existing SSH setup - Privacy-focused: users control what email info is shared - Simple email verification process - Free public service - Perfect for CLI app developers who don't want to build user verification Try it with: `$ ssh keypub.sh about` Source code: https://github.com/skariel/keypub
2024 · keypub.sh · its alternatives →
- 5

- 6

🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. - logto-io/logto
2022 · github.com · its alternatives →
- 7

Logto adds multi-tenancy, enterprise SSO, and RBAC to your SaaS or AI apps. All with OIDC and OAuth 2.1 made simple, fast, and developer-friendly.
2022 · logto.io · its alternatives →
- 8

- 9
Authorizer▲291Open source authentication and authorization solution
2021 · authorizer.dev · its alternatives →
- 10

One identity layer for your customers, APIs, and agents
Jul 2026 · monocloud.com · its alternatives →
- 11

Auth testing reimagined. One-click. Zero setup.
2025 · its alternatives →
- 12

- 13

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2022 · github.com · its alternatives →
- 14

A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 15

Contribute to johnathanhowell/masterkey development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 16
keychains.dev▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
Feb 2026 · keychains.dev · its alternatives →
- 17

Manage secrets in your terminal with biometric unlock.
2022 · 1password.dev · its alternatives →
- 18

Hi HN, we are Deepak and Sama, co-founders of BoxyHQ (https://boxyhq.com/). BoxyHQ provides an open-source platform for developers to quickly integrate enterprise features into their software solutions. These include SAML Single Sign-On (SSO), Audit logs, with more to come :) Every B2B startup faces a common challenge when it comes to selling into the Enterprise; they need to allocate time and resources to support all the requirements to make their offering enterprise-grade. Supporting these requirements is a significant undertaking for the engineering team, especially since…
2022 · boxyhq.com · its alternatives →
- 19

Simple and opinionated OpenID Connect server designed for self-hosters - lastlogin-net/obligator
2023 · github.com · its alternatives →
- 20

Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 21KA
2019 · key.cat · its alternatives →
- 22
Logto Cloud▲121Develop, manage and secure your product’s user identities
2023 · logto.io · its alternatives →
- 23

Keycloak Hosting | Support | Migration | Customization
2024 · phasetwo.io · its alternatives →
- 24

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
2023 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →