Managed Keycloak · Pricing

Simple, predictable pricing.

No MAU fees. No growth penalties. Pay for infrastructure, not users. Plans start at $29/mo, every plan includes unlimited users and full Keycloak admin access, and you can try any plan free for 7 days with no credit card.

SOC 2 Type II ISO 27001 GDPR Compliant Fully Managed
Save 20%
Developer

Perfect for individual developers

$29 /mo

Billed monthly

1 Cluster
  • Unlimited users
  • Full Keycloak admin access
  • All Keycloak features (SSO, MFA, SAML...)
  • 1 Custom domain
  • Custom branding (powered by)
  • Email support
Business

For established businesses

$599 /mo

Billed monthly

2 Clusters
  • Everything in Launch, plus:
  • Custom themes (upload & download)
  • 30-day log retention
  • 90-day insights dashboard
  • 1-hour support response
  • Security add-ons available
Enterprise

Custom needs & compliance

Custom

Tailored to your needs

3+ Clusters
  • Everything in Business, plus:
  • Large clusters & 5 custom domains
  • Up to 99.99% SLA guarantee
  • 24/7 support & dedicated CSM
  • All security add-ons included
  • Private Link/VPC included

See full plan comparison ↓

How does managed Keycloak pricing work?

Managed Keycloak pricing at Skycloak is based on infrastructure, not how many users you have. Plans start at $29/mo, and every plan includes unlimited users, full Keycloak admin access, and all core features (SSO, MFA, SAML, social login, and more). There is no per-MAU tax and no SSO tax, so your bill does not balloon as you grow. Try any plan free for 7 days, no credit card required.

Need custom compliance, dedicated support, or advanced security?

Enterprise adds large clusters, up to a 99.99% SLA, 24/7 support with a dedicated CSM, all security add-ons included, and Private Link / VPC peering. Tell us about your requirements and we will quote a plan that fits.

SOC 2 Type II ISO 27001 GDPR Compliant 99.99% SLA
Talk to Sales
Add-ons & extensions

Enhance your deployment, only when you need it.

Security & Protection

Enterprise-grade security features to protect your authentication endpoints

Web Application Firewall

Protect your authentication endpoints from OWASP Top 10 vulnerabilities including SQL injection, XSS, and protocol attacks. Uses industry-standard OWASP Core Rule Set with configurable paranoia levels. Start in detection mode to tune rules before blocking.

Read the docs →

IP Access Control

Restrict access to your authentication endpoints by IP address or CIDR range. Whitelist your office IPs for admin access, or blacklist known bad actors. Perfect for securing admin consoles while keeping user-facing endpoints open.

Read the docs →

Rate Limiting

Stop brute force attacks and credential stuffing by limiting requests per IP or user. Configure thresholds for login attempts, token requests, and API calls. Attackers get blocked while legitimate users pass through seamlessly.

Read the docs →

Geo-blocking

Control access based on geographic location. Block authentication from countries where you do not operate, or allowlist only approved regions. Meet data residency requirements and reduce exposure to region-specific threats.

Read the docs →

CAPTCHA Protection

Add invisible bot protection with Cloudflare Turnstile. Unlike traditional CAPTCHAs, users rarely see a challenge while automated attacks are blocked. Privacy-focused alternative to reCAPTCHA with no tracking.

Read the docs →

SIEM Integration

Stream authentication events to your security platform in real-time. Native integrations with Splunk, Datadog, Sumo Logic, Azure Sentinel, and Elastic. Correlate identity events with your broader security monitoring and meet compliance requirements.

Read the docs →
Special programs

We support organizations making a difference.

15% OFF

Non-Profits

Registered 501(c)(3) organizations and charities making a difference.

Contact Us
15% OFF

EdTech

Educational institutions and learning platforms empowering students.

Contact Us
15% OFF

Startups

Early-stage startups (under 2 years, less than $1M funding).

Contact Us
The MAU tax

Stop paying the MAU tax.

At 50,000 monthly active users, here is what you would pay each month:

Auth0
$1,750/mo
Okta
$2,500/mo
Stytch
$1,000/mo
Skycloak
$149/mo
90%+

savings compared to MAU-based providers

Compare plans

Find the right plan for your needs.

Feature Developer$29/mo Launch$149/mo★ Popular Business$599/mo EnterpriseCustom
Infrastructure
Keycloak Clusters 1 Small 1 (Medium available) 2 (Medium max) 3 (Large included)
Custom Domains 1 1 1 5
Region Selection
Private Link/VPC Add-on Add-on Included
White Label Domain Via Cloudflare Proxy
Authentication
SSO (OIDC/OAuth)
Multi-Factor Auth (MFA)
WebAuthn/Passkeys
Passwordless Auth
Social Login Providers Unlimited Unlimited Unlimited Unlimited
SAML Support
Custom Identity Providers
User Management
User Dashboard
User Profiles & Attributes
Role-Based Access Control
Session Management
User Event History
Webhooks 1 dest / 50 req/mo 3 dest / 5K req/mo 10 dest / 50K req/mo Unlimited
Applications
Application Management
Setup Wizard
Enterprise App Gallery
Application Roles
Branding & Customization
Login Page Branding
Custom Themes
Theme Upload
Theme Download
Remove "Powered by"
Email Templates
Custom SMTP
Analytics & Monitoring
Auth Events 7 days 30 days 90 days
System Logs 3 days 30 days 90 days
Insights & Analytics 30 days 90 days 365 days
Live Tail 5s delay 5s delay 5s delay
Data Export CSV All formats All + API
Security
WAF Protection Add-on Add-on Included
IP Access Control Add-on Add-on Included
Rate Limiting Add-on Add-on Included
Geo-blocking Add-on Add-on Included
CAPTCHA Protection Add-on Add-on Included
SIEM Export Add-on Add-on Included
Extensions & Migrations
Extension Management
Custom Extensions Included
Keycloak Migration
Support & SLA
Support Channel Email Email & Chat Extended Hours 24/7 & Dedicated CSM
Response Time (Urgent) Best effort 4 hours 1 hour 1 hour (24/7)
SLA Uptime Up to 99.99%
Estimate

Calculate your monthly cost.

Estimate your monthly cost based on your plan, cluster size, and extra domains.

Plan
Upgrade included cluster Small (included)
Extra domains ($49/each) 0

Each plan includes 1 to 3 domains. Add more as needed.

Need security add-ons or multiple clusters? Use our full calculator →

Estimated monthly cost
$149/mo

Save 20% with annual billing

Start Free Trial
What our customers actually said about it

Flat pricing was the deciding factor.

Knowing what we were going to pay up front and that there wasn't going to be any surprises, that was the deal maker.
Ryan Mouser Senior Manager of Strategic Projects, Scratch
The flat pricing is easier to budget. I find it's fair when I looked at other competitors that price per user.
Dustin Newell Principal Web Developer, Beaulieu Canada

Not sure which plan is right for you?

Our team will help you find the perfect fit, and we can build a custom plan tailored to your specific requirements.

Talk to Us
FAQ

Managed Keycloak pricing, answered.

How much does managed Keycloak cost?
Managed Keycloak with Skycloak starts at $29/mo on the Developer plan, with Launch at $149/mo and Business at $599/mo. Pricing is based on infrastructure, not monthly active users, so your bill does not grow as you add users. Annual billing saves 20%, and Enterprise plans are custom-quoted.
Is there a free trial?
Yes. Every plan includes a 7-day free trial with no credit card required. If you do not upgrade before it ends, the trial simply expires with no charges, and you can sign up for a paid plan whenever you are ready.
What is included in each plan?
Every plan includes a dedicated Keycloak cluster, unlimited users, full Keycloak admin access, and all core features (SSO, MFA, SAML, social login, passwordless, RBAC). Higher tiers add more clusters, longer log and analytics retention, custom themes, faster support response times, and options like removing Skycloak branding. Enterprise adds dedicated support, higher SLAs, and included security add-ons.
Can I change or cancel plans?
Yes. You can upgrade or downgrade at any time, changes take effect immediately, and billing is prorated. There are no long-term contracts on self-serve plans, so you are free to change or cancel as your needs change.
Do you charge per user?
No. Skycloak does not charge per monthly active user. You pay for the infrastructure (your clusters and add-ons), and every plan supports unlimited users. That is how teams typically save 90%+ compared to MAU-based providers as they grow.
What happens after my trial ends?
After your trial ends, you lose access to your cluster if you have not upgraded. No credit card is required and there are no surprise charges. You can come back and sign up for a paid plan anytime.
When should I consider Enterprise?
Enterprise is ideal for businesses with custom requirements, tighter compliance needs (SOC 2, ISO 27001), dedicated support, or specific infrastructure configurations such as Private Link / VPC peering. Contact our sales team to discuss your needs.
How is Skycloak different from self-hosted Keycloak?
Skycloak runs real upstream Keycloak and handles all infrastructure, updates, security patches, backups, and scaling. You get enterprise features like WAF, analytics, and fast support without the operational burden, and you can export and self-host at any time.
Start Free Trial Talk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser Soliman