opensourcestartups

> /v1/alternatives/workos

Open source alternatives to WorkOS[010]

WorkOS provides enterprise auth building blocks such as SSO, SCIM directory sync, audit logs and RBAC behind a single developer API. Below are 10 self-hostable open source alternatives, ranked by GitHub popularity.

// AUTH & SECURITY№ 001
Keycloak

Keycloak

JAVA

Open Source Identity and Access Management For Modern Applications and Services

★ STARS

34.3k

⑂ FORKS

8.3k

OPEN PROJECT→
// AUTH & SECURITY№ 002
Better Auth

Better Auth

TYPESCRIPT

The authentication framework for TypeScript

★ STARS

28.2k

⑂ FORKS

2.5k

OPEN PROJECT→
// AUTH & SECURITY№ 003
Authentik

Authentik

PYTHON

The authentication glue you need

★ STARS

21.4k

⑂ FORKS

1.6k

OPEN PROJECT→
// AUTH & SECURITY№ 004
Ory Hydra

Ory Hydra

GO

OpenID Certified™ OpenID Connect and OAuth Provider written in Go

★ STARS

17.1k

⑂ FORKS

1.5k

OPEN PROJECT→
// DEVELOPER TOOLS№ 005
SuperTokens

SuperTokens

JAVA

Open source alternative to Auth0 / AWS Cognito / Firebase Auth

★ STARS

15.0k

⑂ FORKS

662

OPEN PROJECT→
// AUTH & SECURITY№ 006
Zitadel

Zitadel

GO

Identity infrastructure, simplified for you.

★ STARS

13.7k

⑂ FORKS

1.1k

OPEN PROJECT→
// AUTH & SECURITY№ 007
Hanko

Hanko

GO

Authentication and user management for the passkey era

★ STARS

8.9k

⑂ FORKS

1.0k

OPEN PROJECT→
// AUTH & SECURITY№ 008
Permify

Permify

GO

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth

★ STARS

5.9k

⑂ FORKS

310

OPEN PROJECT→
// AUTH & SECURITY№ 009
Cerbos

Cerbos

GO

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

★ STARS

4.4k

⑂ FORKS

181

OPEN PROJECT→
// AUTH & SECURITY№ 010
Authgear

Authgear

GO

Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

★ STARS

1.7k

⑂ FORKS

112

OPEN PROJECT→

// EDITOR'S TAKE

Zitadel is the closest match to WorkOS's B2B model, with first-class organisations, SAML and OIDC, audit trails and an API-first design, while Keycloak covers the same enterprise protocols with far more deployment history but a heavier Java stack and a clunkier admin console. Better Auth is a different shape entirely, a TypeScript library you embed rather than a service you operate, which is the right trade only if you need login for one app and not directory sync.

// FREQUENTLY ASKED

What is the best open source WorkOS alternative?

Keycloak is the most popular open source WorkOS alternative by GitHub stars (34,264 stars). The other 9 options are ranked above.

Are these WorkOS alternatives self-hostable?

Yes — every project listed here is open source and runs on your own infrastructure. Click into a project to see its license, stars, language, and current health status.

Are they free?

All projects shown are free and open source. Check each project's license page for the terms — most are MIT, Apache 2.0, or AGPL.

// PART OF THESE COLLECTIONS