Invicti vs Keycloak
Invicti and Keycloak are both security & identity tools aimed at enterprise and developers. Only Keycloak has a free plan.
Invicti
Proof-based DAST and AppSec platform for web apps and APIs
Keycloak
Open-source identity and access management
| Pricing | Paid | Open source |
| Starting price | Not published | Not published |
| Free plan | No | Yes |
| Free trial | — | — |
| Built for | Enterprise, Developers | Enterprise, Developers |
| Platforms | web, windows | web |
| Country | US | US · 2014 |
| Rating | — | — |
Choose Invicti if
Enterprise security teams that need accurate, automated DAST and API testing across a large web application portfolio.
- Very low false positives thanks to proof-based scanning
- DAST, API and code scanning in one platform
- Flexible deployment, including air-gapped networks
Look elsewhere if: Small teams with one site or developer-led code and dependency scanning needs (Acunetix, Snyk).
Choose Keycloak if
Organizations needing self-hosted enterprise IAM.
- Free and open source
- Enterprise-grade features
- Full control over identity data
Look elsewhere if: Startups wanting simple hosted auth (Clerk, Auth0).
Invicti vs Keycloak pricing
Invicti
- Agentic PentestUp to $500/pentestOne app and its APIs; 24-hour delivery, audit-ready report
- Web + APICustomDAST, API discovery and testing, LLM security, CI/CD
- AppSec CoreCustomAdds SAST, SCA, container, IaC, secrets scanning and ASPM
- AppSec FlexCustomOn-prem or air-gapped deployment, custom roles, CSPM
Keycloak
- Open source$0Apache 2.0, self-hosted
- Red Hat buildCustomCommercial support subscription
Invicti · Key features
- Proof-based scanning that confirms exploitable vulnerabilities with evidence
- DAST for modern web apps, single-page apps and authenticated areas
- API discovery and stateful testing for REST and GraphQL APIs
- LLM security checks for AI-powered applications
- SAST, SCA, container, IaC and secrets scanning in AppSec Core
- ASPM with DAST and SAST correlation and runtime prioritization
Cons
- No public pricing for the main plans
- No self-serve free trial
- Overkill for a single small website
Keycloak · Key features
- SSO via OIDC and SAML
- User federation with LDAP/AD
- Identity brokering and social login
- MFA and password policies
- Fine-grained authorization
- Admin and account consoles
Cons
- Operationally complex
- UI and theming are dated
- Upgrades require care
Invicti vs Keycloak: FAQ
Do Invicti and Keycloak have a free plan?
Invicti has no free plan. Keycloak has a free plan.