Cloud-IAM
Cloud-IAM is a Rennes-based managed Keycloak identity and access management SaaS provider, serving 500+ European and global customers with SLA-backed, ISO 27001-certified deployments across five cloud providers and 70+ regions, supported by tiered subscriptions and professional consulting services.
- Company typePrivate
- Founded2018
- HeadquartersRennes, France
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Cloud-IAM does
Cloud-IAM is a Rennes, France-based software company founded in 2018 as a joint venture between ELLIXO SAS and FGRibreau SARL, operating a managed Keycloak identity and access management (IAM) platform-as-a-service. The company hosts, configures, monitors, and maintains open-source Keycloak (originally developed by Red Hat) on behalf of customers across five cloud providers — Scaleway, AWS, Google Cloud, Azure, and Outscale — spanning 70+ regions, with a stated 99.9834% measured uptime in 2025 and SLAs ranging from 99% (Starter) to 99.98% (Max). The platform supports OIDC, OAuth 2.0, and SAML protocols, integrates with Microsoft Entra ID, ADFS, LDAP, and PostgreSQL, and is differentiated by a dense European compliance posture (ISO 27001:2022, SOC 2 Type 2 in progress, GDPR, NIS 2, HDS, and SecNumCloud 3.2).
The product portfolio consists of the core Managed Keycloak SaaS, a Machine-to-Machine (M2M) authentication module, tiered technical support plans (Freemium through Max), and a Keycloak consulting practice covering audits, migrations, training, custom extension development, and on-premise installations. Revenue is generated primarily through tiered subscription contracts — from free Freemium (up to 100 users) through Starter (€225/month), Essential (€495/month), Premium (€1,440/month), and custom-priced Max with multi-region deployment and 30-minute incident response — plus professional services revenue from the consulting arm. Pricing scales with user count, support level, and cloud provider, with annual billing discounts of 10% and soft user quotas rather than hard caps.
Cloud-IAM serves a diverse customer base of 500+ organizations — including public logos such as AgileTV, Powerflex, Resilience, Brittany Ferries, Drupal, Vardot, and Forto, plus anonymized large-scale case studies (800k–2M user deployments in media, insurance, healthcare, and consumer verticals) — and reports protecting 20M+ identities daily. The company operates a hybrid go-to-market combining product-led self-serve acquisition (deploy in 20 minutes, freemium tier, pricing calculator) for developers and SMBs with a field-sales motion for enterprise deals. Cloud-IAM is bootstrapped, founder-owned, and has disclosed $1.2M ARR and a $3.6M valuation as of 2025 with no external venture capital raised.
Cloud-IAM firmographics
Firmographics- Name
- Cloud-IAM
- Legal name
- Cloud-IAM Société par Actions Simplifiée
- Website
- https://cloud-iam.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cloud-IAM is a Rennes-based managed Keycloak identity and access management SaaS provider, serving 500+ European and global customers with SLA-backed, ISO 27001-certified deployments across five cloud providers and 70+ regions, supported by tiered subscriptions and professional consulting services.
- Ownership category
- akta.pro rank
Cloud-IAM industry classification
Industry- Product category
- Identity and Access Management
- NAICS
- Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Identity, Access & Key Management (IAM/KMS) as Cloud Core Services (HDABAAAH)
- akta.pro secondary industries
- Cloud Landing Zone & Architecture (Network, IAM, Governance) (BPAEACAE), Infrastructure Automation & Configuration Management (IaC) (HDABABAF), Cloud-Native Enablement (Containers, Kubernetes, Service Mesh) (BPAEAKAE)
Keywords
Where Cloud-IAM is headquartered
LocationHeadquarters
- HQ city
- Rennes
- HQ country
- France
- HQ region
- Europe
Offices3 records
Markets served
Cloud-IAM business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Infrastructure, Personnel, Operations, Marketing or Sales
Revenue model
- Managed Keycloak SaaS Subscription: Subscription-based pricing for managed Keycloak hosting and support. Pricing scales with user count (total unique users, not MAU), support level, and cloud provider choice. Multiple tiers from Freemium to Enterprise (Max). Annual billing saves 10%.
- Keycloak Consulting Services: Professional consulting services including Q&A sessions, expertise & consulting assistance, training sessions (3-day comprehensive), production support, configuration audits, on-premise installation audits with certification, full Keycloak installation, and custom extension development.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Freemium - Up to 100 users, free, community support, no SLA guarantee |
| Subscription | Monthly | Starter - Starting from €225/month for 500 users, 99% Uptime SLA |
| Subscription | Monthly | Essential - Starting from €495/month for 500 users, 99.9% Uptime SLA |
| Subscription | Monthly | Premium - Starting from €1,440/month for 500 users, 99.95% Uptime SLA |
| Subscription | Multi-year contract | Max - Custom pricing, 99.98% Uptime SLA, multi-region deployment |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
Cloud-IAM product offering
Product offeringCore offering
Cloud-IAM provides Keycloak Identity and Access Management as a fully managed cloud service. It deploys, operates, scales, monitors, and supports open-source Keycloak instances across multiple cloud providers and regions, with SLA-backed uptime, 24/7 expert support, and integrated consulting for migration, training, and custom extension development.
Product overview
Cloud-IAM is a managed Keycloak platform offered as a service, built and operated by a joint venture of ELLIXO SAS and FGRibreau SARL (both French companies) since 2018. The core product is the Managed Keycloak SaaS, a fully hosted, cloud-native Keycloak deployment with SLA-backed uptime (up to 99.98%), ISO 27001 certification, and 24/7 expert support delivered by a 100% in-house European team. The product portfolio consists of the core Managed Keycloak platform, the Keycloak M2M (machine-to-machine) security module, tiered Keycloak Support plans (Freemium through Max), and Keycloak Consulting services for audit, setup, training, migration, and custom extension development. Keycloak itself is the open-source IAM/SSO solution developed by Red Hat, which Cloud-IAM manages on behalf of customers across 5+ cloud providers and 70+ regions. The platform natively supports OIDC, OAuth 2.0, and SAML protocols and offers identity federation with Microsoft Entra ID, ADFS, LDAP, and PostgreSQL.
Differentiator
Problem solved
Functional benefit
Products and services
- Managed Keycloak A managed, cloud-native Keycloak-as-a-Service platform providing fully hosted and operated Keycloak deployments with SLA-backed uptime guarantees, 24/7 expert support, automatic upgrades, and high availability across multiple cloud regions. Delivered as a dedicated environment deployable in approximately 20 minutes, targeting enterprise engineering and DevOps teams.
- Keycloak Support Tiered technical support for managed Keycloak deployments spanning deployment setup, data migration, configuration, production go-live, and daily operations. Available across five levels: Freemium (community), Starter (99% SLA), Essential (99.9% SLA), Premium (99.95% SLA with 24/7 on-call), and Max (99.98% SLA with 30-minute incident response).
- Keycloak Consulting Strategic consulting services for Keycloak covering audit, setup, migration, training, and custom extension development. Delivered remotely or on-site by Keycloak experts, including Q&A sessions, architecture reviews, production support, configuration audits with certification, full installation, and ongoing custom development and maintenance.
- Keycloak Machine to Machine (M2M) Machine-to-machine authentication module within Keycloak using the OAuth 2.0 Client Credentials flow. Enables services to authenticate dynamically at runtime using signed JWT tokens verified independently via JWKS endpoint, with granular scope control, short-lived tokens, and full credential portability across cloud providers and regions.
Quantifiable outcome
- 99.9834% measured uptime in 2025
- +4 more outcomes
Companies that use Cloud-IAM
Customer profileNamed customers13 records
Segments5 records
Ideal customer profiles5 records
Cloud-IAM technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
Feature9 records
Cloud-IAM partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core.
- OutscalecoreOutscale is a European cloud provider (France) used for Cloud-IAM customer Keycloak deployments. Outscale is the only provider supporting SecNumCloud 3.2 certification and HDS compliance. Part of 3DS group.
- ScalewaycoreScaleway is a European cloud provider used for Cloud-IAM customer Keycloak deployments. Available on all support tiers for European deployments.
- Google Cloud PlatformcoreGoogle Cloud is used for Cloud-IAM customer Keycloak deployments across USA, Europe, and Asia regions. GCP data centers feature robust layered security.
- Amazon Web Services (AWS)coreAWS is used for Cloud-IAM customer Keycloak deployments across USA, Europe, and Asia regions. Provides worldwide coverage.
- Microsoft AzurecoreMicrosoft Azure is used for Cloud-IAM customer Keycloak deployments across USA, Europe, and Asia regions.
- Keycloak (Red Hat)coreKeycloak is the open-source IAM solution developed by Red Hat that Cloud-IAM manages as a service. Keycloak has been around for over 10 years. Cloud-IAM is not affiliated with Red Hat.
- StripecoreStripe handles Cloud-IAM payment processing. Stripe is PCI Level 1 Service Provider certified. Cloud-IAM does not typically receive credit card data directly.
Scale indicators9 records
Recent moves6 records
Expansion highlights5 records
Cloud-IAM competitors and assessment
Company assessmentEmerging players
- WorkOS: WorkOS provides enterprise SSO, SCIM, and user management APIs aimed at B2B SaaS applications. It is comparable to Cloud-IAM as a developer-first identity layer, with overlap in IdP-broker and B2B SSO use cases.
Broad incumbents
- AWS Cognito: AWS Cognito provides identity management natively within the AWS ecosystem, including user pools and federated identities. It is comparable as a broad cloud-incumbent IAM offering, especially for AWS-centric applications seeking bundled pricing.
- Google Cloud Identity: Google Cloud Identity (and Workforce Identity Federation) provides identity and access services integrated with Google Workspace and GCP. It is comparable as a broad hyperscaler IAM offering competing on bundled cloud economics.
- Microsoft Entra ID: Microsoft Entra ID (formerly Azure AD) is the default identity provider in the Microsoft ecosystem, serving enterprise IAM at massive scale. It is comparable as a broad incumbent IAM provider integrated with cloud and productivity suites, often displacing specialist vendors in Microsoft-heavy enterprises.
Direct peers
- Auth0: Auth0 (now part of Okta) is a developer-focused CIAM and authentication platform. It is comparable to Cloud-IAM's CIAM and developer self-serve positioning, and is named in Cloud-IAM's customer migrations.
- Ping Identity: Ping Identity is an enterprise IAM platform offering SSO, federation, and CIAM with a strong on-premises heritage. It is comparable to Cloud-IAM's enterprise IAM positioning and is cited in Cloud-IAM's customer migrations.
- Okta: Okta is the leading cloud-native identity and access management platform offering SSO, MFA, and CIAM. It is directly comparable to Cloud-IAM as an enterprise IAM vendor — Cloud-IAM's case studies explicitly cite Okta as a displaced competitor.
- FusionAuth: FusionAuth is an authentication and user management platform often deployed self-hosted or in customer cloud accounts. It is directly comparable to Cloud-IAM as a developer-focused IAM alternative; Cloud-IAM case studies name FusionAuth as a displaced vendor.
- JumpCloud: JumpCloud is a cloud directory platform providing identity, SSO, device management, and MFA for SMBs and mid-market. It is comparable to Cloud-IAM as a horizontal IAM vendor with a self-serve and SMB-friendly GTM.
- OneLogin: OneLogin is a cloud-based IAM solution offering SSO, MFA, and user provisioning for enterprises. It is directly comparable to Cloud-IAM as a SaaS IAM alternative and is named in Cloud-IAM's displaced-vendor list.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Cloud-IAM social profiles
Digital presenceCloud-IAM compliance and trust
Trust signalCompliance7 records
Cloud-IAM financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cloud-IAM leadership team
Management profileNumber of profiles
Profiles2 records
Cloud-IAM funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cloud-IAM M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cloud-IAM
What does Cloud-IAM do?
Cloud-IAM provides Keycloak Identity and Access Management as a fully managed cloud service. It deploys, operates, scales, monitors, and supports open-source Keycloak instances across multiple cloud providers and regions, with SLA-backed uptime, 24/7 expert support, and integrated consulting for migration, training, and custom extension development.
Is Cloud-IAM a public or private company?
Cloud-IAM is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cloud-IAM founded?
Cloud-IAM was founded in 2018. It employs 11 to 50 people.
Where is Cloud-IAM based?
Cloud-IAM is headquartered in Rennes, France, in the Europe region.
How does Cloud-IAM make money?
Two revenue lines are on record. Managed Keycloak SaaS Subscription is the primary driver. The others are keycloak Consulting Services.
Who are Cloud-IAM's main competitors?
WorkOS is listed as an emerging player. Broad incumbents are AWS Cognito, Google Cloud Identity and Microsoft Entra ID. Direct peers are Auth0, Ping Identity, Okta, FusionAuth, JumpCloud and OneLogin.
Does Cloud-IAM have an API?
Yes. Cloud-IAM provides full access to all native Keycloak REST APIs for authentication, user management, token handling, and more. Customers can integrate seamlessly into CI/CD pipelines to automate configuration, deployment, and scaling. Additionally, Cloud-IAM offers its own REST API accessible through the Cloud-IAM dashboard and console. Custom SPI extensions can be developed or integrated via the Cloud-IAM Console without extra cost. Developer documentation is at documentation.cloud-iam.com.
What industry is Cloud-IAM in?
Cloud-IAM's product category is Identity and Access Management. Its primary akta.pro industry code is HDABAAAH, Identity, Access & Key Management (IAM/KMS) as Cloud Core Services, with a secondary code of BPAEACAE, Cloud Landing Zone & Architecture (Network, IAM, Governance). Its NAICS code is 5415 and its SIC code is 7372.