Roadmap
We ship what we can operate and sell what we run. The roadmap is deliberately phased so each availability and multi-cloud claim is backed by production maturity before it’s offered.
Platform phases
Section titled “Platform phases”Phase 1 — Single-region managed Keycloak Foundation
- Fargate JVM data plane, serverless control plane, Aurora Multi-AZ, cells + placement.
- Automated backups and failover within a region. Target 99.9%.
Phase 2 — Analytics & AI config Differentiators
- Event Listener SPI → ClickHouse dashboards and audit exports (Analytics).
- AI-config console: plain-English changes with dry-run diff (Realms).
Phase 3 — Multi-region active-passive Resiliency
- Aurora Global, DNS failover, tested promotion drills. Target 99.95% once proven.
Phase 4 — Multi-cloud (premium) On demand
- Cross-cloud warm standby (Aurora→Azure logical replication) for DR/sovereignty.
- YugabyteDB active-active for customers who need no failover gap → the 99.99% tier.
- Offered when a customer contractually requires it, repriced as a premium — not the default.
Feature tracks (in parallel)
Section titled “Feature tracks (in parallel)”| Track | Direction |
|---|---|
| Identity depth | Passkeys everywhere, richer adaptive auth, more IdP/federation connectors |
| Migration tooling | One-click importers for Auth0/Cognito/Ping, JIT federation helpers |
| STS / token-broker | Broader cloud targets, finer-grained scoping |
| Compliance | Formal SOC 2 attestation, then HIPAA — a multi-quarter program, reported honestly |
| Operations | More autonomous upgrades, capacity-aware autoscaling, per-cell economics tuning |
What we deliberately are not claiming yet
Section titled “What we deliberately are not claiming yet”Have a requirement that isn’t here yet? It’s probably a premium tier we can scope — talk to us.