Skip to content

zitadel

Secrets & Credentials

An open‑source, API‑first identity and access management platform for building SSO, MFA, passkeys, OIDC, SAML, SCIM and multi‑tenant IAM solutions.

Go Latest v3.4.13 · 10d ago Security brief →

Features

  • Full‑featured identity platform (SSO, MFA, Passkeys, OIDC, SAML, SCIM)
  • Comprehensive event‑driven audit trail with webhook support
  • Strict multi‑tenant hierarchy and zero‑downtime updates
  • API‑first design (gRPC + REST) for programmatic control

Recent releases

View all 28 releases →
Upgrade now
v3.4.13 Bug fix
RCE / SSRF

Disk access prevention

Review required
v4.16.1 Bug fix
Auth RCE / SSRF

Bug fixes: actions, console, login

Review required
v4.16.0 Mixed
Auth RBAC

Scope validation + invite codes + FIPS crypto

Review required
v4.15.3 Bug fix
Auth RBAC

Token validation + email verification + UI centering

Upgrade now
v4.15.2 Bug fix
Auth RBAC

JWT validation + PKCE + event owner + passkey

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
14,454
Forks
1,188
Languages
Go TypeScript MDX

Install & Platforms

Install via
docker-compose shell-script

Community & Support

Alternative to

FusionAuth Keycloak Auth0 Okta

Beta — feedback welcome: [email protected]