No MAU fees. No growth penalties. Pay for infrastructure, not users. Plans start at $29/mo, every plan includes unlimited users and full Keycloak admin access, and you can try any plan free for 7 days with no credit card.
Perfect for individual developers
Billed monthly
1 ClusterFor growing startups
Billed monthly
1 ClusterFor established businesses
Billed monthly
2 ClustersCustom needs & compliance
Tailored to your needs
3+ ClustersManaged Keycloak pricing at Skycloak is based on infrastructure, not how many users you have. Plans start at $29/mo, and every plan includes unlimited users, full Keycloak admin access, and all core features (SSO, MFA, SAML, social login, and more). There is no per-MAU tax and no SSO tax, so your bill does not balloon as you grow. Try any plan free for 7 days, no credit card required.
Enterprise adds large clusters, up to a 99.99% SLA, 24/7 support with a dedicated CSM, all security add-ons included, and Private Link / VPC peering. Tell us about your requirements and we will quote a plan that fits.
Scale your identity infrastructure with additional resources
Scale horizontally by adding more Keycloak clusters. Run separate environments for dev, staging, and production, or distribute load across multiple instances. Choose from Small ($39/mo), Medium ($199/mo), or Large ($399/mo) clusters based on your needs.
Read the docs →Add more custom domains beyond what's included in your plan. Each tier includes 1 domain (Enterprise: 5). Additional domains are $49/mo each with automatic SSL certificates and CDN distribution.
Read the docs →Keep authentication traffic off the public internet. Connect your Keycloak cluster directly to your AWS, Azure, or GCP VPC through private endpoints. Essential for enterprises with strict network security requirements.
Read the docs →Enterprise-grade security features to protect your authentication endpoints
Protect your authentication endpoints from OWASP Top 10 vulnerabilities including SQL injection, XSS, and protocol attacks. Uses industry-standard OWASP Core Rule Set with configurable paranoia levels. Start in detection mode to tune rules before blocking.
Read the docs →Restrict access to your authentication endpoints by IP address or CIDR range. Whitelist your office IPs for admin access, or blacklist known bad actors. Perfect for securing admin consoles while keeping user-facing endpoints open.
Read the docs →Stop brute force attacks and credential stuffing by limiting requests per IP or user. Configure thresholds for login attempts, token requests, and API calls. Attackers get blocked while legitimate users pass through seamlessly.
Read the docs →Control access based on geographic location. Block authentication from countries where you do not operate, or allowlist only approved regions. Meet data residency requirements and reduce exposure to region-specific threats.
Read the docs →Add invisible bot protection with Cloudflare Turnstile. Unlike traditional CAPTCHAs, users rarely see a challenge while automated attacks are blocked. Privacy-focused alternative to reCAPTCHA with no tracking.
Read the docs →Stream authentication events to your security platform in real-time. Native integrations with Splunk, Datadog, Sumo Logic, Azure Sentinel, and Elastic. Correlate identity events with your broader security monitoring and meet compliance requirements.
Read the docs →Extend Keycloak with custom functionality
Deploy your own custom Keycloak SPIs, themes, or authenticators. Upload your JAR files through our dashboard and we handle the deployment, updates, and monitoring. Keep using your existing customizations without managing infrastructure.
Read the docs →Need a custom authenticator, user federation, or protocol mapper? Our Keycloak experts build it for you. We handle development, testing, and deployment. Includes ongoing maintenance and updates for Keycloak compatibility.
Read the docs →Upgrade your Enterprise urgent response time for mission-critical deployments
Upgrade from standard 1-hour to 30-minute response time for urgent issues. Our fastest response with dedicated escalation paths for organizations where authentication downtime has significant business impact.
Read the docs →Registered 501(c)(3) organizations and charities making a difference.
Contact UsAt 50,000 monthly active users, here is what you would pay each month:
savings compared to MAU-based providers
| Feature | Developer$29/mo | Launch$149/mo★ Popular | Business$599/mo | EnterpriseCustom |
|---|---|---|---|---|
| Infrastructure | ||||
| Keycloak Clusters | 1 Small | 1 (Medium available) | 2 (Medium max) | 3 (Large included) |
| Custom Domains | 1 | 1 | 1 | 5 |
| Region Selection | ||||
| Private Link/VPC | Add-on | Add-on | Included | |
| White Label Domain | Via Cloudflare Proxy | |||
| Authentication | ||||
| SSO (OIDC/OAuth) | ||||
| Multi-Factor Auth (MFA) | ||||
| WebAuthn/Passkeys | ||||
| Passwordless Auth | ||||
| Social Login Providers | Unlimited | Unlimited | Unlimited | Unlimited |
| SAML Support | ||||
| Custom Identity Providers | ||||
| User Management | ||||
| User Dashboard | ||||
| User Profiles & Attributes | ||||
| Role-Based Access Control | ||||
| Session Management | ||||
| User Event History | ||||
| Webhooks | 1 dest / 50 req/mo | 3 dest / 5K req/mo | 10 dest / 50K req/mo | Unlimited |
| Applications | ||||
| Application Management | ||||
| Setup Wizard | ||||
| Enterprise App Gallery | ||||
| Application Roles | ||||
| Branding & Customization | ||||
| Login Page Branding | ||||
| Custom Themes | ||||
| Theme Upload | ||||
| Theme Download | ||||
| Remove "Powered by" | ||||
| Email Templates | ||||
| Custom SMTP | ||||
| Analytics & Monitoring | ||||
| Auth Events | 7 days | 30 days | 90 days | |
| System Logs | 3 days | 30 days | 90 days | |
| Insights & Analytics | 30 days | 90 days | 365 days | |
| Live Tail | 5s delay | 5s delay | 5s delay | |
| Data Export | CSV | All formats | All + API | |
| Security | ||||
| WAF Protection | Add-on | Add-on | Included | |
| IP Access Control | Add-on | Add-on | Included | |
| Rate Limiting | Add-on | Add-on | Included | |
| Geo-blocking | Add-on | Add-on | Included | |
| CAPTCHA Protection | Add-on | Add-on | Included | |
| SIEM Export | Add-on | Add-on | Included | |
| Extensions & Migrations | ||||
| Extension Management | ||||
| Custom Extensions | Included | |||
| Keycloak Migration | ||||
| Support & SLA | ||||
| Support Channel | Email & Chat | Extended Hours | 24/7 & Dedicated CSM | |
| Response Time (Urgent) | Best effort | 4 hours | 1 hour | 1 hour (24/7) |
| SLA Uptime | Up to 99.99% | |||
Estimate your monthly cost based on your plan, cluster size, and extra domains.
Each plan includes 1 to 3 domains. Add more as needed.
Need security add-ons or multiple clusters? Use our full calculator →
Knowing what we were going to pay up front and that there wasn't going to be any surprises, that was the deal maker.
Ryan Mouser
Senior Manager of Strategic Projects, Scratch
The flat pricing is easier to budget. I find it's fair when I looked at other competitors that price per user.
Dustin Newell
Principal Web Developer, Beaulieu Canada
Our team will help you find the perfect fit, and we can build a custom plan tailored to your specific requirements.