authentik vs FusionAuth
authentik
goauthentik.ioFusionAuth
fusionauth.ioSide by side
| Figure | authentik | FusionAuth |
|---|---|---|
| Price from | $5/mo | $162/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 8 |
| Spec score · Authentication Software | 8.6 (#4) | 9.2 (#2) |
| Spec score · Identity and Access Management Software | 8.6 (#6) | 9.2 (#1) |
| Spec score · Passkey Authentication Software | 8.7 (#8) | 9.2 (#4) |
| Spec score · Single Sign-On Software | 8.6 (#6) | 9.3 (#1) |
| Spec score · OAuth Server Software | 8.5 (#9) | 9.1 (#2) |
| Authentication | It supports multi-factor authentication with TOTP and WebAuthn/passkeys, including hardware or software authenticators. | It supports username/password login, identity providers, passkeys, and one-time passwords. |
| Deployment | authentik can run on customers’ own infrastructure, including Docker and Kubernetes, and the pricing FAQ says there is currently no hosted version. | The product can run locally, on premises, in a customer cloud, on an air-gapped server or as FusionAuth Cloud. |
| Headquarters | Pennsylvania, United States | United States |
| Support | The open-source plan lists community Discord and no support; paid support is offered as part of enterprise software subscriptions, with ticket support for Enterprise subscriptions over $1k. | Community support is provided through forums, Slack, and GitHub; Essentials includes email support with a 24 to 48 hour business-hours response time, and Enterprise includes 24/7 email and phone support. |
Plans
authentik
- FreeFree
- Enterprise$5 a month
- Open SourceFree
- Enterprise Plus$20,000 a year
FusionAuth
- CommunityFree
- CommunityFree
- Starter$162 a month
- Starter$162 a month
- Enterprise$2,970 a month
- Enterprise$2,970 a month
- Essentials$2,970 a month
- Essentials$2,970 a month
In their own words
authentik
authentik is an open-source, self-hostable identity and access management product for workforce single sign-on, customer identity, zero-trust security, legacy application integration and API security. It supports OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM and Kerberos, as well as WS-Federation. MFA options include TOTP, WebAuthn/passkeys, email, SMS, Duo and static tokens. Access policies can consider factors such as user attributes, time and location. Security features include audit logging, session binding, GeoIP and impossible-travel detection, and client certificate authentication with mTLS. It can run on customer infrastructure, including Docker and Kubernetes; the pricing FAQ says there is no hosted version currently. The authentik Agent integrates with Windows, macOS and Linux for local device login and CLI authentication. A free open-source plan includes community Discord support but no product support. Enterprise costs $5 a month, billed annually, at $5 per user per month; external users are $0.02 per month and service accounts have no cost.
FusionAuth
FusionAuth is a Customer Identity and Access Management server for authentication, authorization, and user management. It supports username and password login, passkeys, one-time passwords, and external identity providers, including Apple, Facebook, Google, and Twitter. It implements OAuth 2.0, OpenID Connect, and SAML v2. Authorization includes role-based access across users, roles, groups, applications, and entities, plus fine-grained authorization integration. Teams can customize pages and messages and use lambda functions and webhooks. It can run locally, on-premises, in private or air-gapped cloud environments, or as a managed FusionAuth Cloud instance. The free Community Edition is self-hosted and unlimited, with no trial clock. Starter costs $162 a month billed annually and includes one connector and 100 machine-to-machine entities; Essentials and Enterprise cost $2,970 a month billed annually. FusionAuth supports Android, iOS, Linux, macOS, Windows, web, and API deployments.