Curity

Swedish OAuth and OpenID Connect identity server you deploy yourself, with a free Community Edition

Quick Overview

Company Curity AB
Category Identity Management
Headquarters Stockholm, Sweden
Founded 2015
EU Presence EU (Sweden)
Data Location Self-hosted (on-premise or any cloud you choose); no Curity-operated SaaS found
Open Source No
Compliance OpenID Foundation certified
Pricing Community Edition free / Standard, Enterprise and Token Handler editions on a flat annual subscription, price on request
Free Option Free Community Edition; 14-day free trial of the paid editions
Replaces Auth0, Okta, Ping Identity

Detailed Review

Curity AB is a Swedish limited company founded in Stockholm in 2015, registration number 559017-0196, at Sankt Göransgatan 66. Its terms of use, last updated on 30 March 2026, name that entity as the contracting party. The product is an identity server built around the standards rather than around a console: OAuth, OpenID Connect, FAPI, SAML and SCIM, with OpenID Foundation certification confirming the implementation conforms.

There is no Curity-operated SaaS. The deployment page describes on-premise, single-cloud, multi-cloud and hybrid installations and nothing else, which is a stronger residency position than any hosted service can offer — the data sits where you put it, and no vendor region picker is involved. It also means the whole operational burden is yours, and there is no way to try the product without standing it up.

The Community Edition is free and the paid editions — Standard, Enterprise and Token Handler — are sold on a flat annual subscription with the price on request, plus a 14-day trial.

Free is not the same as open source here: the code is not published under an open licence. Since May 2023 GRO, a Danish private equity fund, has held an investment in the company, with the size of the stake not stated. Curity's own pages name no ISO 27001 or comparable audit.

What Curity does well

  • Swedish AB in Stockholm, founded 2015, registration number 559017-0196
  • You choose the infrastructure: on-premise, single-cloud, multi-cloud or hybrid
  • OAuth, OpenID Connect, FAPI, SAML and SCIM, certified by the OpenID Foundation
  • Free Community Edition, plus a 14-day trial of the paid editions
  • Flat annual subscription rather than billing per active user

Where Curity falls short

  • No price published for the paid editions — flat annual subscription on request
  • Free Community Edition, but the product is not open source
  • No vendor-run service at all, so every deployment is your operation
  • No ISO 27001 or comparable independent audit stated on its own pages
  • Part-owned since 2023 by GRO, a Danish private equity fund, with the stake undisclosed

Standout feature. It runs on hardware you chose, because there is no Curity cloud to run it on instead.

Pros and Cons

Pros

  • Swedish AB in Stockholm, founded 2015, registration number 559017-0196
  • You choose the infrastructure: on-premise, single-cloud, multi-cloud or hybrid
  • OAuth, OpenID Connect, FAPI, SAML and SCIM, certified by the OpenID Foundation
  • Free Community Edition, plus a 14-day trial of the paid editions
  • Flat annual subscription rather than billing per active user

Cons

  • No price published for the paid editions — flat annual subscription on request
  • Free Community Edition, but the product is not open source
  • No vendor-run service at all, so every deployment is your operation
  • No ISO 27001 or comparable independent audit stated on its own pages
  • Part-owned since 2023 by GRO, a Danish private equity fund, with the stake undisclosed

Alternatives to Curity

See all identity management →

Frequently Asked Questions

What is Curity?

Curity AB is a Swedish limited company founded in Stockholm in 2015, registration number 559017-0196, at Sankt Göransgatan 66. Its terms of use, last updated on 30 March 2026, name that entity as the contracting party. The product is an identity server built around the standards rather than around a console: OAuth, OpenID Connect, FAPI, SAML and SCIM, with OpenID Foundation certification confirming the implementation conforms.

Where is Curity based?

Curity operates from Stockholm, Sweden, which places it under EU (Sweden). Compliance: OpenID Foundation certified.

What does Curity cost?

Community Edition free / Standard, Enterprise and Token Handler editions on a flat annual subscription, price on request. Free Community Edition; 14-day free trial of the paid editions.

Who is Curity best for?

Teams that want a standards-heavy OAuth and OpenID Connect server on their own hardware. It runs on hardware you chose, because there is no Curity cloud to run it on instead.

What are the drawbacks of Curity?

No price published for the paid editions — flat annual subscription on request. Free Community Edition, but the product is not open source. No vendor-run service at all, so every deployment is your operation. No ISO 27001 or comparable independent audit stated on its own pages. Part-owned since 2023 by GRO, a Danish private equity fund, with the stake undisclosed.

Is Curity a good alternative to Auth0?

Curity is built as a European alternative to Auth0: Swedish OAuth and OpenID Connect identity server you deploy yourself, with a free Community Edition. It will not be a like-for-like feature match in every respect, so check the review above for where the two genuinely differ before switching.

How does Curity compare to other Identity Management tools?

Curity is one of several European Identity Management tools we cover. It is most often compared with Auth0, Okta, Ping Identity.

Who worked on this review

Three people touch every tool page: one writes it, a second edits it, and a third checks the compliance and pricing claims against the vendor's own documentation.

Ingrid Halvorsen
Written by

Ingrid Halvorsen

Managing Editor · Oslo, Norway

Runs the review process and decides when a page is ready to publish or needs another pass.

Sebastiaan Smits
Edited by

Sebastiaan Smits

Founder & Editor · Netherlands

Selects the tools, writes the reviews, and checks where each company is actually established.

Marta Kowalczyk
Fact-checked by

Marta Kowalczyk

Senior Analyst, Infrastructure & Developer Tools · Warsaw, Poland

Covers hosting, developer tooling and the practical side of moving workloads to European providers.

Read our editorial process for how we source, verify and update these pages — and how we keep affiliate income separate from what we recommend.

Go to Curity