Keywhiz
Secret management and distribution system
This project is archived. Upstream development has stopped, so expect no new features or security fixes. Consider an actively maintained identity & sso alternative.
Keywhiz is a secret management and distribution system built by Square for securely storing and serving sensitive infrastructure secrets to services. It is fully self-hosted and uses mutual TLS for access.
Key features
- Secret storage and distribution
- Mutual TLS access
- Automatic rotation
- Self-hostable
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Active community (2.6k GitHub stars)
- Written in Java
Keywhiz replaces
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth