Autheliavs
Keycloak


Keycloak: A full IAM platform when proxy-level protection is not enough

Open-source authentication and two-factor portal for reverse proxies
As of 29 August 2026, Authelia is free to use. A single sign-on and 2FA portal that sits behind your reverse proxy and protects services that have no login. Softwr lists it under Cybersecurity. Authelia is available on Self-hosted, Linux.
Overview
Authelia is an open-source authentication and authorisation server providing single sign-on and two-factor authentication through a login portal. It is designed to work with a reverse proxy — Nginx, Traefik, Caddy or HAProxy — which forwards authentication decisions to it. That model is its distinguishing feature and its constraint. It protects applications that have no authentication of their own, which is exactly the situation in self-hosted stacks full of admin panels and dashboards. It is deliberately lightweight, with file or LDAP-backed users rather than a full identity platform.
The honest half
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Authelia.
Cross-shopped
Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.


Keycloak: A full IAM platform when proxy-level protection is not enough


authentik: A middle ground: a real identity provider that is still self-hosted and approachable
Pricing
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Authelia
Free
Capabilities
Reverse proxy integration
Works with Nginx, Traefik, Caddy and HAProxy through forward auth
Two-factor authentication
TOTP, WebAuthn and push notification options
Access control rules
Per-domain and per-path policies in configuration
Lightweight backends
File-based or LDAP users, with no heavy dependencies
Answered, with sources
Each answer names the page it came from, so you can check it rather than take our word for it.
Yes, open source with no licence fee.
Yes. It integrates through forward authentication with Nginx, Traefik, Caddy or HAProxy rather than sitting in front of traffic itself.
Authelia is far lighter and aimed at protecting self-hosted services behind a proxy. Keycloak is a full identity and access management platform, and much more to run.
Keep looking
Open-source identity provider with flexible authentication flows
Open-source identity and authentication infrastructure for apps and APIs
Customer identity and access management platform for SaaS applications
Open-source static analysis tool for finding security bugs and enforcing code standards.
Secure-by-default open source software with hardened container images and libraries
Open-source password manager for teams with self-hosted or cloud deployment
European digital identity hub connecting national eID schemes
AI adjudication of sanctions screening and AML alerts
Supply chain security platform detecting and blocking malicious dependencies
Predictive identity verification and fraud scoring for the US market
Proven security, performance and simplicity for modern networks
Open-source identity, authentication, and permissions infrastructure
Softwr does not host reviews and shows no star rating for Authelia, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
What people switch to, and what they give up
Every tier, and where the cost actually lands
Put it head to head with anything we hold
Its rating, and an embed for your own site
Large Chinese video platform that US federal buyers and federal contractors cannot lawfully use
quoteManaged video loss prevention with human auditors for restaurants, convenience stores and retail
quoteWorkforce and customer authentication from a certificate authority
Per user per monthPrivileged access management, endpoint privilege management and secure remote access
quoteCloud video surveillance billed per camera per month, where retention length drives the bill more than anything else
Per camera per monthAI video search that runs on cameras you already own, starting near five dollars per camera per month
Per camera per monthPhishing-resistant passwordless authentication with device trust enforced at every login
quote