</>macrostackBrowse all
Best of · 5 tools ranked

The best Authentication & Identity

Every option ranked — open-source, self-hostable, and commercial — by our transparent Sovereignty Score, with honest trade-offs so you choose what fits you, not us.

Login, single sign-on, and identity-management platforms that handle user authentication, authorization, and access control for apps and APIs.

  1. 1

    Keycloak

    Top pickOpen source

    The mature, CNCF-backed open-source identity and access management server.

    Free / self-host (Docker image or standalone distribution); commercial support available via Red Hat build of Keycloak (RHBK) for enterprises that want a support contract. · in our Auth0 comparison →

    90
    sovereignty
  2. 2

    authentik

    Open source

    A modern, self-hostable identity provider with a flexible visual flow builder.

    Free / self-host for the core MIT-licensed product; a hosted 'authentik Security' cloud offering and an Enterprise tier (support SLA, extra features under the separate enterprise/ license) are available paid. · in our Auth0 comparison →

    85
    sovereignty
  3. 3

    Ory Kratos

    Open source

    A headless, API-only identity server for teams that want to build their own login UI.

    Free / self-host under Apache-2.0; Ory Network offers a managed hosted version with a free tier and paid usage-based plans for teams that prefer not to operate it themselves. · in our Auth0 comparison →

    84
    sovereignty
  4. 4

    ZITADEL

    Open source

    A cloud-native, API-first identity platform with a generous self-hosted core.

    Free / self-host under AGPL-3.0; ZITADEL Cloud offers a managed free tier plus paid usage-based plans for teams that don't want to run the server themselves. · in our Auth0 comparison →

    82
    sovereignty
  5. 5

    SuperTokens

    Open source

    A developer-friendly, self-hostable auth core built for fast integration into existing apps.

    Free / self-host for the Apache-2.0 core; a managed SuperTokens cloud and a paid Enterprise tier (SSO/SAML, advanced MFA policies under the ee/ license) are available for teams that want those features or don't want to self-host. · in our Auth0 comparison →

    80
    sovereignty

Replacing a specific tool?

Head-to-head comparisons for each popular authentication & identity product.

The Macrostack brief

New swaps, worth your inbox.

A short, occasional email when we add a high-intent alternative or ship a new head-to-head. No spam, no selling your address — unsubscribe in one click.