Explore and compare curated open-source alternatives. Filter by platform, licensing, or deployment mode to find your perfect fit.
Keycloak is an open-source alternative to Okta and Auth0 that runs on your own infrastructure, providing self-hosted OIDC, SAML, and user federation.
HashiCorp Vault replaces static secret sprawl and SaaS credential hubs with self-hosted dynamic credentials, PKI, and centralized data encryption.
JumpServer replaces proprietary PAM suites like CyberArk with a self-hosted bastion gateway featuring browser-based access and automated password rotation.
Better Auth replaces Clerk with a self-hosted TypeScript authentication framework featuring native database adapters, plugins, and full schema ownership.
Authentik is a self-hosted alternative to Okta providing SSO, MFA, and forward-auth reverse proxying with zero per-user licensing fees.
Open-source identity platform with native B2B multi-tenancy, Passkeys, event-sourced audit trails, and typed gRPC and REST APIs to replace Auth0.
Free IDE for Java, Kotlin, Go, TypeScript and Python. Built on IntelliJ Community, fully open source, 300+ plugins.
SuperTokens is an open-source alternative to Auth0 that provides self-hosted authentication, customizable login SDKs, and local session verification.
Logto is an open-source Auth0 alternative providing self-hosted OIDC, multi-tenant organizations, and enterprise SSO backed by PostgreSQL.
Ory Kratos is an open-source, headless identity system that replaces Firebase Auth with self-hosted SQL storage and custom JSON Schema traits.
Hanko is an open-source alternative to Clerk and Auth0, delivering self-hosted passkey authentication and drop-in UI components with full data sovereignty.
Stack Auth is an open-source alternative to Clerk and Auth0 that runs via Docker, giving teams total control over user data and Postgres storage.
Open-source authorization engine inspired by Google Zanzibar with ReBAC and ABAC access control, sub-millisecond gRPC checks, and PostgreSQL storage.