Side by side
Keycloak vs Locke Gateway
Both stand on passkey authentication software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxSelf-hosted+2
Keycloak provides single sign-on, multiple authentication methods, directory synchronization, and fine-grained authorization policies as open-source software. Some features need enabling, and the project recommends Red Hat build of Keycloak for users who need long-term support for specific versions.
Visit Keycloak
Free plan APISelf-hostedWeb
Locke Gateway offers hosted passkey authentication with domain scoping, a browser-encrypted vault, and broad framework bindings. Plan for session loss if migrating away, even though credential data can be exported.
Visit Locke GatewayThe facts
| Keycloak | Locke Gateway | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Linux, Self-hosted, Web, Windows | API, Self-hosted, Web |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | keycloak.org | lockeidentity.com |
| On passkey authentication software | #14 of 55 | #18 of 55 |
Keycloak: what it does well
- Supports OpenID Connect, OAuth 2.0, and SAML
- Offers passkeys, passwords, certificates, and two-factor methods
- Synchronizes users from LDAP and Active Directory
- Provides server, container, and operator deployments
What to know first
- Some features are disabled by default
- Preview features may not be generally available as supported features
- Long-term support for specific versions points to Red Hat build
Locke Gateway: what it does well
- Free forever with no per-user pricing
- No authentication rate limits stated
- Hosted setup needs an RP ID, not a server
- Browser-encrypted key-value vault
- Credential export follows DNS TXT verification
What to know first
- Gateway sessions do not migrate with exported credentials
- Self-hosting is estimated at about $14/month on AWS
Alternatives to Keycloak Alternatives to Locke Gateway The whole list