Last checked October 15, 2026
Authentik vs Zitadel
Authentik and Zitadel are free apps you can use instead of Auth0. Authentik is full on a second factor. Zitadel is full on social login.
100 means it does everything the paid app does. How this works
Instead of Auth0
Last checked October 15, 2026
Authentik scores 93 and ranks #2. Zitadel scores 90 and ranks #3.
Scroll sideways to see both apps.
| Feature | Authentik#2 · 93 | Zitadel#3 · 90 |
|---|---|---|
| A hosted login pageCounts for 10 | Full | Full |
| OIDC or SAMLCounts for 10 | Full | Full |
| Social loginCounts for 6 | Partial | Full |
| A second factorCounts for 8 | Full | Partial |
| A user directoryCounts for 8 | Full | Full |
Where they differ
Social login
Counts for 6. Authentik is partial. Zitadel is full.
A second factor
Counts for 8. Authentik is full. Zitadel is partial.
Both are full on a hosted login page, OIDC or SAML, and a user directory.
Also ranked: Keycloak scores 100 and ranks #1. SuperTokens scores 88 and ranks #4. Authelia scores 71 and ranks #5.
The facts on file
Authentik
An identity provider with an MIT core.
- Rules
- Open source. MIT (core)
- authentik/enterprise has its own license. The website directory is CC BY-SA.
- Run it yourself
- Moderate. Plan on Docker or a small virtual machine. A paid hosted plan, if there is one, is separate from the free copy you run yourself.
- Free plan
- The free edition can run on your own server. You do not pay per person. We did not copy a hosted price here. Not checked.
- They host it
- No hosted price on file.
- Where it runs
- Web, Run it yourself
Last checked October 15, 2026
Zitadel
An identity server written in Go.
- Rules
- Open source. AGPL-3.0
- Run it yourself
- Moderate. Plan on Docker or a small virtual machine. A paid hosted plan, if there is one, is separate from the free copy you run yourself.
- Free plan
- The free edition can run on your own server. You do not pay per person. We did not copy a hosted price here. Not checked.
- They host it
- No hosted price on file.
- Where it runs
- Web, Run it yourself
Last checked October 15, 2026
Which one to pick
Authentik
Pick Authentik if a second factor should be full. Social login is partial. The core is MIT. The enterprise folder has its own rules.
Zitadel
Pick Zitadel if social login should be full. A second factor is partial. The license file is AGPL-3.0, not Apache. Running it is moderate, same as Authentik.