Selecting an identity and access management tool means balancing the job it covers with the condition of the project behind it. This October 2026 snapshot uses the supplied ToolVitals scores, health, shipping, openness, and license records for open/source-visible tools.
The ranking includes open/source-visible tools only and orders them by ToolVitals score descending, then by health and shipping for equal composite scores. GitHub stars are context only; they do not determine the order.
Rankings
| Rank | Tool | Openness | License | Health | Shipping | GitHub Stars | Score | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Authentik | OSI-approved OSS | MIT | 98 | 97 | 25875 | 97 | 🟢 Excellent |
| 2 | Better Auth | OSI-approved OSS | MIT | 97 | 96 | 30209 | 97 | 🟢 Excellent |
| 3 | Keycloak | OSI-approved OSS | Apache-2.0 | 97 | 96 | 37167 | 97 | 🟢 Excellent |
| 4 | Thunder | OSI-approved OSS | Apache-2.0 | 97 | 96 | 587 | 97 | 🟢 Excellent |
| 5 | Casdoor | OSI-approved OSS | Apache-2.0 | 97 | 96 | 14521 | 96 | 🟢 Excellent |
| 6 | Jans | OSI-approved OSS | Apache-2.0 | 97 | 96 | 651 | 96 | 🟢 Excellent |
| 7 | Authelia | OSI-approved OSS | Apache-2.0 | 96 | 96 | 29201 | 96 | 🟢 Excellent |
| 8 | Logto | OSI-approved OSS | MPL-2.0 | 96 | 94 | 14656 | 95 | 🟢 Excellent |
| 9 | Pocket ID | OSI-approved OSS | BSD-2-Clause | 96 | 94 | 9407 | 95 | 🟢 Excellent |
| 10 | Zitadel | OSI-approved OSS | AGPL-3.0 | 96 | 93 | 15235 | 95 | 🟢 Excellent |
| 11 | FerrisKey | OSI-approved OSS | Apache-2.0 | 95 | 94 | 718 | 95 | 🟢 Excellent |
| 12 | Pomerium | OSI-approved OSS | Apache-2.0 | 95 | 94 | 5027 | 95 | 🟢 Excellent |
| 13 | AthenZ | OSI-approved OSS | Apache-2.0 | 95 | 92 | 1010 | 94 | 🟢 Excellent |
| 14 | Authgear | OSI-approved OSS | Apache-2.0 | 94 | 95 | 2098 | 94 | 🟢 Excellent |
| 15 | Frontier | OSI-approved OSS | Apache-2.0 | 94 | 94 | 344 | 94 | 🟢 Excellent |
| 16 | VoidAuth | OSI-approved OSS | AGPL-3.0 | 94 | 94 | 2867 | 94 | 🟢 Excellent |
| 17 | Cerbos | OSI-approved OSS | Apache-2.0 | 94 | 93 | 4616 | 94 | 🟢 Excellent |
| 18 | Hanko | OSI-approved OSS | AGPL-3.0 | 94 | 92 | 9034 | 93 | 🟢 Excellent |
| 19 | Kanidm | OSI-approved OSS | MPL-2.0 | 94 | 91 | 5444 | 93 | 🟢 Excellent |
| 20 | Seamless Auth | OSI-approved OSS | Apache-2.0 | 92 | 94 | 2 | 93 | 🟢 Excellent |
| 21 | Weft ID | OSI-approved OSS | MIT | 92 | 91 | 12 | 92 | 🟢 Excellent |
| 22 | Passbolt | OSI-approved OSS | AGPL-3.0 | 91 | 94 | 6147 | 92 | 🟢 Excellent |
| 23 | shiro | OSI-approved OSS | Apache-2.0 | 90 | 86 | 4460 | 88 | 🟢 Excellent |
| 24 | Kotauth | OSI-approved OSS | MIT | 88 | 85 | 55 | 87 | 🟢 Excellent |
| 25 | Authula | OSI-approved OSS | Apache-2.0 | 84 | 82 | 271 | 83 | 🟢 Excellent |
| 26 | Authorizer | OSI-approved OSS | Apache-2.0 | 82 | 80 | 2107 | 81 | 🟢 Excellent |
| 27 | MaxKey | OSI-approved OSS | Apache-2.0 | 77 | 73 | 1961 | 75 | 🟢 Good |
| 28 | PowerAuth | OSI-approved OSS | Apache-2.0 | 75 | 69 | 62 | 72 | 🟢 Good |
| 29 | OPAL | OSI-approved OSS | Apache-2.0 | 71 | 55 | 5514 | 64 | 🟢 Good |
| 30 | EAuth | OSI-approved OSS | Apache-2.0 | 62 | 53 | 2 | 59 | 🟡 Fair |
| 31 | authenticator-tauri | OSI-approved OSS | MIT | 66 | 42 | 1 | 56 | 🟡 Fair |
| 32 | Steward | OSI-approved OSS | MIT | 64 | 42 | 99 | 55 | 🟡 Fair |
| 33 | Ory Kratos | OSI-approved OSS | Apache-2.0 | 53 | 39 | 13912 | 47 | 🟡 Fair |
| 34 | NextAuth | OSI-approved OSS | ISC | 48 | 33 | 28369 | 42 | 🟡 Fair |
| 35 | Open Authenticator | OSI-approved OSS | GPL-3.0 | 41 | 26 | 93 | 35 | 🔴 Needs Attention |
| 36 | PearPass | OSI-approved OSS | Apache-2.0 | 36 | 17 | 538 | 29 | 🔴 Needs Attention |
| 37 | ghost-auth | OSI-approved OSS | GPL-3.0 | 20 | 6 | 3 | 14 | 🔴 Needs Attention |
| 38 | Buwana | OSI-approved OSS | GPL-3.0 | 17 | 0 | 3 | 10 | 🔴 Needs Attention |
| 39 | HVT | OSI-approved OSS | AGPL-3.0 | 16 | 0 | 3 | 10 | 🔴 Needs Attention |
| 40 | WAIS Core | OSI-approved OSS | MIT | 9 | 0 | 1 | 5 | 🔴 Needs Attention |
| 41 | Tesseral | OSI-approved OSS | MIT | 7 | 0 | 1140 | 4 | 🔴 Needs Attention |
| 42 | exoauth | OSI-approved OSS | MIT | 6 | 0 | 1 | 3 | 🔴 Needs Attention |
| 43 | Warrant | OSI-approved OSS | Apache-2.0 | 4 | 0 | 1338 | 2 | 🔴 Needs Attention |
| 44 | SSOReady | OSI-approved OSS | MIT | 2 | 0 | 1536 | 1 | 🔴 Needs Attention |
| 45 | authman-app | OSI-approved OSS | GPL-3.0 | 2 | 0 | 61 | 1 | 🔴 Needs Attention |
| 46 | Oso | OSI-approved OSS | Apache-2.0 | 1 | 0 | 3490 | 0 | 🔴 Needs Attention |
| 47 | Padloc | OSI-approved OSS | AGPL-3.0 | 1 | 0 | 2927 | 0 | 🔴 Needs Attention |
| 48 | JAP | OSI-approved OSS | LGPL-3.0 | 0 | 0 | 168 | 0 | 🔴 Needs Attention |
Top 3 Highlights
Authentik is ranked first with a ToolVitals score of 97, health score of 98, and shipping score of 97. Its supplied description calls it ‘The authentication glue you need.’ The record labels it ‘OSI-approved OSS’ with a ‘MIT’ license, while its 25,875 GitHub stars provide context rather than ranking weight.
Better Auth is ranked second with a ToolVitals score of 97, health score of 97, and shipping score of 96. Its supplied description presents it as ‘The most comprehensive authentication framework.’ The record labels it ‘OSI-approved OSS’ with a ‘MIT’ license, and lists 30,209 GitHub stars as context only.
Keycloak is ranked third with a ToolVitals score of 97, health score of 97, and shipping score of 96. Its supplied description identifies it as ‘Open Source Identity and Access Management For Modern Applications and Services.’ The record labels it ‘OSI-approved OSS’ under ‘Apache-2.0’ and lists 37,167 GitHub stars as context only.
Want to see the full health, license, shipping, and confidence details for every tool in Identity & Access Management? Browse all Identity & Access Management Tools →