Managed Keycloak comparison

Managed Keycloak providers compared

Cloud-IAM, Skycloak and Phase Two all run Keycloak on dedicated infrastructure. What differs is what the plan you start on includes: security controls, an SLA, control over upgrades, and where your data lives.

Start for free View pricing

Prices and plans as published on November 5, 2026.

See all our comparisons

What the entry plan includes

Each provider’s first production plan, at a similar price. Cloud-IAM Starter is an all-included service from day one: two Keycloak instances on a highly available database, security controls, downloadable backups and a 99% SLA. Elsewhere, several of these come with a higher plan or as paid add-ons.

Cloud-IAM Starter: €99/month, up to 250 users
Skycloak Launch: $149/month, small cluster, unlimited users
Phase Two Starter: $149/month, sized for 5,000 active users

Entry plans of Cloud-IAM, Skycloak and Phase Two compared
Security
	Cloud-IAM Starter€99/month, up to 250 users	Skycloak Launch$149/month, small cluster, unlimited users	Phase Two Starter$149/month, sized for 5,000 active users
IP allow and deny lists	Included	Paid add-on	From Premium ($749/month)
Rate limiting per IP	Included	Paid add-on	Included
Automatic bans for brute-force, enumeration and DDoS attempts	Included	Paid add-on	Not listed
Keycloak and access logs exported to your SIEM	Included	Paid add-on	Telemetry export: Enterprise only ($2,499/month)
Service
Uptime SLA	99%	None (best effort)	None (95% target)
High availability	Two Keycloak instances, multi-AZ HA database by default	Not listed	HA cluster
Support	Email, best effort; ticket center from Essential (€249/month)	Email and chat, 4-hour urgent response, US Eastern hours	Email
You choose when to upgrade Keycloak	Upgrade on demand, or plan it in your maintenance window	Automatic, in a maintenance window	Automatic, no version pinning
Realms	Up to 100	Not listed	Up to 5
Custom theme upload	Included	From Business ($599/month)	1
Your own extensions (JARs)	Unlimited, from Essential (€249/month)	From the Business plan ($599/month), plus a paid add-on	1, from Premium ($749/month)
Data and hosting
Full database backup download	Included	Included	On request
Backups stored in	The EU	The US	Ireland, for EU clusters
Cloud providers	Your choice: AWS, Google Cloud, Azure, Scaleway, 3DS Outscale	Set by region: Azure, AWS, OVHcloud, Akamai	AWS
SecNumCloud 3.2 and HDS hosting	On 3DS Outscale	Not included	Not included
Certifications	ISO 27001:2022 certified; SOC 2 Type 2 in progress	ISO 27001, SOC 2 Type II	ISO 27001, SOC 2 Type II
Company based in	France	Canada	United States

Why teams move to Cloud-IAM

Security that isn’t an add-on

IP allow and deny lists, rate limiting and automatic bans of attacking IPs come with every paid plan. Your Keycloak and access logs are available through our API for your SIEM, at no extra cost.

Upgrades on your schedule

You pick the Keycloak version and the date. Every upgrade starts with a backup, and our on-call team helps you finish or roll back. Extended Security Lifecycle keeps older versions patched for up to three years.

European from end to end

A French company, with EU-owned clouds to choose from, SecNumCloud 3.2 and HDS hosting on 3DS Outscale, and backups kept in the EU.

Sovereign IAM, out of reach of the CLOUD Act

Your data, ready to leave

Download full PostgreSQL backups and Keycloak exports with users and their credentials at any time, and restore them on any Keycloak.

Don't take our word for it: read our reviews on Trustpilot

Frequently asked questions

Comparing providers for a specific project? Our Keycloak engineers will go through your requirements with you.

Talk to a Keycloak engineer

What is the best managed Keycloak provider?

For production use in Europe, Cloud-IAM includes on its entry plan what Skycloak and Phase Two sell as add-ons or reserve for higher plans: IP allow and deny lists, log export for a SIEM, an uptime SLA and control over upgrade dates. It also offers EU-owned clouds and SecNumCloud 3.2 hosting, and keeps backups in the EU.

How much does managed Keycloak cost?

Cloud-IAM is free up to 100 users, then from €99/month for up to 250 users with a 99% SLA. Skycloak starts at $29/month and Phase Two at $149/month, both without an SLA on their entry plans.

We compare Skycloak's $149 Launch plan, not its $29 Developer plan: Skycloak presents Developer as a plan for individual developers, with its branding left on the login page and 3 days of system logs, while Launch is its first plan for teams. Prices checked on 5 November 2026.

Why does Cloud-IAM limit users when other providers say unlimited?

Every Keycloak is limited by the machines it runs on. Some providers leave the user count open and sell cluster sizes, or size each plan for a monthly login volume, so capacity becomes your problem. Cloud-IAM counts only user accounts and treats capacity as its job: we watch how your Keycloak is used and size the infrastructure to it, with nothing to choose and no capacity add-ons to buy.

Which managed Keycloak providers are based in the EU?

Cloud-IAM is a French company. Skycloak is Canadian and Phase Two is American; both run their control planes in the US, according to their own documentation.

See what sovereign IAM means at Cloud-IAM.

Can I move from Skycloak or Phase Two to Cloud-IAM?

Yes. All three run Keycloak, so a realm export or a database dump from one imports into another. Our Keycloak team helps you pick the migration method and supports you through it.

Sources