#216
A+
Rank #5
Zitadel
Modern cloud-native identity platform providing OIDC/SAML, multi-tenancy, and passwordless auth out of the box. Standout trait is being built from day one for horizontal scale with event-sourced state in a single Go binary.
88.3
/ 100
⚙ Full Stack
Go server using an event-sourcing/CQRS model backed by PostgreSQL (formerly CockroachDB), exposing gRPC and REST/OIDC APIs with no client-side secret handling. Stateless server pods scale independently of the Postgres-backed event store.
📈 Scaling Analysis
Stateless Go server pods scale horizontally behind a load balancer with all durable state in Postgres, and the event-sourced design avoids the read/write contention that plagues traditional IdPs at scale. This is the strongest scalability story in the batch — genuinely designed for multi-region, high-QPS identity workloads from the outset.
🚀 Running on Nexlayer
Deploy as a zitadel pod plus a postgres pod reached at postgres.pod:5432 via Nexlayer's inter-pod DNS, using mirror.gcr.io for the Postgres base image and the official Zitadel image directly (already GHCR-hosted). Set ZITADEL_EXTERNALDOMAIN/ZITADEL_EXTERNALPORT to the public <% URL %> value, not an internal pod address, since OIDC redirect URIs must be browser-facing.