PRICING - CLOUD-IAM Machine-readable pricing for AI agents and automated buyers. Last updated 2026-06-30. Canonical human-readable page: https://www.cloud-iam.com/pricing Live pricing API (source of truth): https://api.cloud-iam.com/plans?version=3.0 Cloud-IAM provides Managed Keycloak: fully dedicated, production-ready Keycloak deployments hosted in the cloud region of your choice, with European-sovereignty options and expert support. A deployment is typically provisioned in about 20 minutes. Pricing is driven by three factors: 1. User count - total number of unique user accounts connected to your Keycloak instance (not Monthly Active Users). Anyone authenticated through Keycloak counts, including users via social login, SSO, Azure AD or LDAP. 2. Support level - Freemium, Starter, Essential, Premium, or Max. Higher levels add SLA, faster incident response, proactive monitoring, backups, and consulting. 3. Cloud provider - Scaleway, AWS, Google Cloud, Outscale, or Microsoft Azure. The same plan can cost differently depending on the provider you pick. All prices are in EUR per month, EXCLUDING TAX (HT); VAT is added according to your location. Annual billing is available (see BILLING). "Contact sales" means the tier is not self-service: the Max support level and every tier above 1,000,000 users are fully custom and priced on request. There are no usage-based or per-API-call fees: active users, connected clients, SSO, identity federation, and both the Keycloak REST API and the Cloud-IAM REST API are unlimited on every plan. User-count quotas are SOFT LIMITS - exceeding them never blocks or interrupts your service. ================================================================ SUPPORT LEVELS AT A GLANCE ================================================================ Freemium : SLA none | on-call no | incident best effort | RTO best effort | RPO 24h | single region | mutualized | self-service Starter : SLA 99% | on-call no | incident best effort | RTO 6h | RPO 24h | single region | dedicated | self-service Essential : SLA 99.9% | on-call no | incident 12h | RTO 6h | RPO 24h | single region | dedicated | self-service Premium : SLA 99.95% | on-call 24/7 | incident 1h | RTO 2h | RPO 24h (custom) | single region | dedicated | self-service Max : SLA 99.98% | on-call 24/7 | incident 30 min | RTO 1h | RPO 15 min | multi region | dedicated bare-metal & HA | contact sales Notes: Freemium and Starter use a global Discord channel (passive notifications). Essential/Premium/Max use ticket & email (proactive). Max adds a dedicated status page. Support response time (French working day): Essential 2 days, Premium 1 day, Max 1 day. Premium and Max include 1 day/month of Keycloak consulting expertise. ================================================================ PLANS AND PRICES (EUR / month, by cloud provider) ================================================================ Provider key: SCW = Scaleway (Europe), AWS = Amazon Web Services (Worldwide), GCP = Google Cloud (Worldwide), OUT = Outscale (France), AZU = Microsoft Azure (Worldwide). FREE - up to 100 users, 1 realm Freemium : SCW - | AWS 0 | GCP - | OUT - | AZU - (Mutualized AWS infrastructure, region eu-west-3 only. No SLA.) UP TO 250 USERS - 100 realms Starter : SCW 99 | AWS 189 | GCP 319 | OUT 599 | AZU 599 Essential : SCW 249 | AWS 419 | GCP 699 | OUT 1299 | AZU 1299 Premium : SCW 1299 | AWS 1299 | GCP 1999 | OUT 3799 | AZU 3799 Max : Contact sales (all providers) UP TO 500 USERS - 100 realms Starter : SCW 249 | AWS 249 | GCP 359 | OUT 659 | AZU 659 Essential : SCW 549 | AWS 549 | GCP 789 | OUT 1399 | AZU 1399 Premium : SCW 1599 | AWS 1599 | GCP 2299 | OUT 4199 | AZU 4199 Max : Contact sales (all providers) UP TO 1,000 USERS - 100 realms Starter : SCW 299 | AWS 299 | GCP 399 | OUT 699 | AZU 699 Essential : SCW 659 | AWS 659 | GCP 899 | OUT 1499 | AZU 1499 Premium : SCW 1899 | AWS 1899 | GCP 2499 | OUT 4399 | AZU 4399 Max : Contact sales (all providers) UP TO 5,000 USERS - 100 realms Starter : SCW 399 | AWS 399 | GCP 449 | OUT 749 | AZU 749 Essential : SCW 879 | AWS 879 | GCP 989 | OUT 1599 | AZU 1599 Premium : SCW 2599 | AWS 2599 | GCP 2799 | OUT 4699 | AZU 4699 Max : Contact sales (all providers) UP TO 10,000 USERS - 100 realms Starter : SCW 499 | AWS 499 | GCP 499 | OUT 799 | AZU 799 Essential : SCW 1099 | AWS 1099 | GCP 1099 | OUT 1699 | AZU 1699 Premium : SCW 3199 | AWS 3199 | GCP 3199 | OUT 4999 | AZU 4999 Max : Contact sales (all providers) UP TO 50,000 USERS - 100 realms Starter : SCW 999 | AWS 999 | GCP 999 | OUT 1099 | AZU 1099 Essential : SCW 1690 | AWS 1690 | GCP 1690 | OUT 2399 | AZU 2399 Premium : SCW 4399 | AWS 4399 | GCP 4399 | OUT 5799 | AZU 5799 Max : Contact sales (all providers) UP TO 250,000 USERS - 100 realms Starter : SCW 1799 | AWS 1799 | GCP 1799 | OUT 1999 | AZU 1999 Essential : SCW 2499 | AWS 2499 | GCP 2499 | OUT 4399 | AZU 4399 Premium : SCW 5199 | AWS 5199 | GCP 5199 | OUT 6599 | AZU 6599 Max : Contact sales (all providers) UP TO 1,000,000 USERS - 100 realms Starter : SCW 2999 | AWS 2999 | GCP 2999 | OUT 3499 | AZU 3899 Essential : SCW 4499 | AWS 4499 | GCP 4499 | OUT 6599 | AZU 6399 Premium : Contact sales (all providers) Max : Contact sales (all providers) ABOVE 1,000,000 USERS (5M, 10M, 10M+ tiers) - 100 realms All support levels: Contact sales -> https://www.cloud-iam.com/contact/ ================================================================ LIMITS AND OVERAGE ================================================================ - User count is a SOFT LIMIT. Cloud-IAM never blocks access or disrupts your service if you exceed your tier. Your account manager reaches out to determine whether the overage is temporary or reflects ongoing growth, then adjusts the plan if needed. - Realms: 1 on Free, 100 on every paid tier. - Unlimited on all plans: active users (no rate limiting), connected clients, SSO, identity federation, Keycloak REST API usage, Cloud-IAM REST API usage. - Backups: snapshots and cold backups every 24h (Starter, Essential), customizable on Premium, every 15 min on Max. Snapshot retention 7 days (customizable on Premium/Max). Cold backup retention 1 month on all paid tiers. - Keycloak Marketplace discount: Essential -25%, Premium -50%, Max -75%. - Reversibility / export: Keycloak export (config, users, data, passwords) 24/7. Free tier: 1 export per day; paid tiers: unlimited. ================================================================ BILLING ================================================================ - Monthly billing: pay the monthly price shown above. - Annual billing: about 10% cheaper than 12 monthly payments. Annual price = monthly price x 10.8 (you effectively pay for about 10.8 months instead of 12). Example (Scaleway, Starter, 250 users): 99 EUR/mo -> 1,069.20 EUR/yr (vs 1,188). Example (AWS, Starter, 250 users): 189 EUR/mo -> 2,041.20 EUR/yr (vs 2,268). - Currency: EUR, excluding tax (HT). VAT is added according to your location. - You can upgrade plan or support level at any time; transitions are seamless. ================================================================ FEATURE COMPARISON (Freemium / Starter / Essential / Premium / Max) ================================================================ SLA & on-call Guaranteed SLA: none / 99% / 99.9% / 99.95% / 99.98% On-call team: no / no / no / 24/7 / 24/7 Incident management Communication channel: Global Discord / Global Discord / Ticket & email / Ticket & email / Ticket & email Notification mode: Passive / Passive / Proactive / Proactive / Proactive Incident response time: none / best effort / 12h / 1h / 30 min Dedicated status page: Max only RTO: none / best effort / 6h / 2h / 1h RPO: none / 24h / 24h / 24h (customizable) / 15 min Support Community & documentation: all tiers Ticket center & email access: Essential, Premium, Max Support response time (French working day): 2 days (Essential) / 1 day (Premium) / 1 day (Max) Maintenance Planning for updates: Automatic (Starter, Essential) / Customizable (Premium, Max) Architectural maintenance: Automatic (Starter, Essential) / Customizable (Premium, Max) Upgrade-on-demand feature: Premium, Max Backup Snapshots & cold backups: 24h (Starter, Essential) / 24h customizable (Premium) / 15 min (Max) Snapshot retention: 7 days (Starter, Essential) / 7 days customizable (Premium, Max) Cold backup retention: 1 month (all paid) Integration / configuration support Keycloak consulting: 1 day/month (Premium, Max) Communication channel: Ticket/email (Essential) / Ticket, email, video call (Premium, Max) Configuration response time (French working day): 5 days (Essential) / 3 days (Premium, Max) Users & realms Users: 100 (Free) / customizable (all paid); Realms: 1 (Free) / 100 (all paid) Cloud providers Scaleway (Europe), AWS (Worldwide), Google Cloud (Worldwide), Outscale (France), Microsoft Azure (Worldwide). Free tier is AWS only. Architecture Type: Mutualized (Free) / Single region (Starter, Essential, Premium) / Multi region (Max) Infrastructure: Mutualized (Free) / Dedicated (all paid); Bare-metal & HA on Max Keycloak extensions (SPI) Theme customization, custom extensions (.jar), Keycloak Marketplace: paid tiers Marketplace discount: Essential -25% / Premium -50% / Max -75% Configuration features Allow lists, custom domains, environment variables, third parties (trusted certificates, password deny list), Terraform IaC / Pulumi IaC Monitoring features Insights (users, connections, realms), infrastructure logs (Keycloak + load balancer), Keycloak events, audit logs (info, update, backup, redeployment) Reversibility Keycloak export (config, users, data, passwords): 1/day (Free) or unlimited (paid), 24/7 Keycloak features (all paid plans) Keycloak events, MFA, SSO, password policy, LDAP/AD/Kerberos/other external DB, Identity Provider brokering, social providers Protocols: OIDC, OAuth 2.0, SAML | Authorization: ABAC, RBAC, PBAC, GBAC User management (groups, attributes, etc.) Authentication methods Native: login password, reset password, passkeys, passwordless WebAuthn, social login, identity provider, MFA Via SPI extension: SMS/email OTP, magic link ================================================================ FAQ ================================================================ How does Cloud-IAM pricing work? Based on three factors: total user count, support level, cloud provider. Usage-based and flexible, with no hidden fees. Calculator: https://www.cloud-iam.com/pricing/#section-plan-choice How do I count my users? Total all unique user accounts connected to your Keycloak instance, including users via social login, SSO, Azure AD or LDAP. Based on total accounts, not MAU. Is there a limit on the number of clients? No hard limit. Each plan has a soft quota that can be raised at any time. What happens if I hit my user limit? Is it a hard stop? No. Service is never blocked or disrupted. Quotas are soft limits; your account manager contacts you to adjust the plan if growth is sustained. Can I start small and upgrade later? Yes. Upgrade plan or support level at any time with a seamless transition. How long until my Managed Keycloak is ready? Each deployment is fully dedicated in your chosen cloud region, typically ~20 minutes. Is there a free plan? Yes, Freemium: up to 100 users and 1 realm, mutualized AWS infrastructure, no cost. Which cloud providers and regions are available? Scaleway (Europe, 3 regions), AWS (Worldwide, 21 regions), Google Cloud (Worldwide, 25 regions), Outscale (France, 1 region), Microsoft Azure (Worldwide, 5 regions). For European data sovereignty: Scaleway and Outscale. ================================================================ CONTACT ================================================================ Contact sales: https://www.cloud-iam.com/contact/ Documentation: https://documentation.cloud-iam.com/ Status: https://status.cloud-iam.com/