Compare software

Ory Kratos vs Keycloak: catalog facts
Ory KratosKeycloak
Free

Free to self-host; Ory also sells a hosted version through Ory Network.

Free

Free and open source under the Apache 2.0 licence.

Self-hosted Self-hosted
  • Supports passkeys, social sign-in, OIDC, SAML and TOTP
  • API-first design leaves the login UI fully under your control
  • Single sign-on and single sign-out across applications
  • Supports OpenID Connect and SAML 2.0 identity brokering
  • Headless, so you must build or adopt your own login pages
  • Aimed at developers rather than end users
  • Setting it up and securing it takes real administrative effort
  • More than most single-user homelabs need
Self-hosted Self-hosted
Open source Open source
License not stated License: Apache-2.0
Not stated if an account is needed Not stated if an account is needed
Not stated if it works offline Not stated if it works offline

Checked October 1, 2026

Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.