Blog
Honest product boundaries and a close look at what Keycloak ships today.
What Keycloak actually ships for devices — a trusted-device cookie, X.509, WebAuthn — and why none of them is device posture. An honest boundary: we do not protect the session after login.