Your team already chose Keycloak. We make it work exactly as you need.
Specialized consulting in Keycloak, IAM, and MFA integration.
Deeply understand your Keycloak instance to get the most out of it, investing time in what truly matters for your business.
Nobody will thank you for a login that works. But when it breaks, everyone calls.
Authentication is the most invisible infrastructure in your company: the whole organization and every one of your customers simply assume it is there and working.
Spending your team's hours on it generates no revenue and differentiates no product — no business unit will ever notice that your realms are well designed. But a failure in the identity layer doesn't degrade the service, it stops it. Nobody gets in: not your employees, not your customers, not your integrations. The cost is measured in hours of the entire organization standing still, in security incidents and, if you operate in a regulated sector, in the conversation with the auditor that follows.
The opportunity cost
Every hour your team spends on Keycloak is an hour not spent on the product your customers actually pay for. Identity is critical, but it is not what sets you apart in your market.
The asymmetry of the risk
Getting it right goes unnoticed. Getting it wrong is noticed everywhere at once. That is exactly the profile of a function worth handing to people who do it every day.
Judgment doesn't improvise
Staying current on Keycloak — CVEs, releases, API changes between versions, flow best practices — is continuous work. It doesn't pay off in a team that touches identity twice a year.
It's the same reasoning by which you don't build your own database or run your own data center. We only do Keycloak: it is our core business, not one more ticket in your team's backlog.
Digital sovereignty starts at the identity layer.
In a moment when technological independence is a strategic priority, Keycloak offers total control: open source, deployment on your cloud or on-premise, without surrendering data to third parties outside your regulatory region.
We work with teams inside and outside Europe.
We are a Spain-based consultancy working remotely with teams across Europe, the United States and LATAM. We adapt to your time zone for the sessions that matter: discovery, an upgrade cutover, or a production incident.
Technical conversations in your language.
Meetings, documentation and technical support in English or Spanish. No intermediaries, no language barrier in the conversations where precision actually matters.
Our services
Configuration & Customization
Problem: A poorly designed realm is technical debt that grows with every new client.
What we do: We design the realm structure, flows, and themes tailored to your organization.
Deliverable: A Keycloak instance configured, documented, and ready for production.
Authentication Flows
Problem: Default flows that create friction for users or leave security gaps.
What we do: We design and implement advanced flows with MFA that balance security and user experience.
Deliverable: Login, registration, and recovery flows deployed and tested in your environment.
Security Audit
Problem: Without expert review, insecure configurations go unnoticed until it's too late.
What we do: We validate that your instance follows the project's security guidelines and best practices.
Deliverable: Audit report with prioritized findings and remediation plan.
Keycloak Upgrade
Problem: Outdated versions (WildFly, unsupported databases) create security risks and growing technical debt.
What we do: We plan and execute the upgrade of your instance to the latest stable version: configuration, data, custom themes and SPIs, validation on a mirror environment, and a cutover with a rollback plan.
Deliverable: Updated Keycloak instance, configured and documented, with team training and 4 weeks of post-upgrade support.
The Keycloak upgrade has a service page of its own, with the 5 phases, the scope and the detailed FAQ.
See the Keycloak upgrade serviceCollaboration formats
Not all teams are at the same stage. Choose the format that best fits your situation.
Hours package
For specific questions, architecture decisions, or when you need an expert on the other side without committing to a full project. You purchase a block of hours and use them at your own pace.
Implementation project
You have a clear goal — migrate an identity system, integrate Keycloak with your platform, deploy MFA — and need a team to execute it end-to-end. Defined scope, fixed timeline, concrete deliverable.
Monthly retainer
For organizations that already have Keycloak in production and need continuous backup support: incident response, configuration evolution, and someone who knows your environment when changes arise.
Audit & code review
You already have something built and want a second expert opinion. We review your implementation, validate the configuration against security best practices, and deliver a report with prioritized findings and an actionable remediation checklist.
If what you need is ongoing maintenance with a fixed scope and price, we offer monthly support plans from €290/month.
See Keycloak support plansHow we work
- 1DiscoveryWe analyze your Keycloak instance, current flows, and business requirements in 60–90 minutes.
- 2DiagnosisWe identify configuration issues, security gaps, and improvement opportunities in realms, flows, and themes.
- 3ProposalWe deliver an action plan with prioritized recommendations, concrete deliverables, and timelines.
- 4ExecutionWe configure realms and themes, implement advanced authentication flows, and validate your instance's security.
- 5HandoverFull documentation, team training, and everything needed to operate with confidence.