License & Deployment Mix: 32 tools – 1 OSS, 6 SaaS. (OSS and SaaS counts can overlap when an open-source tool also offers a vendor-hosted edition.)
What Is Physical Access Control?
Physical Access Control Systems (PACS) are software platforms that manage electronic door locks, card readers, biometric scanners, and access policies for buildings and restricted areas. Unlike simple lock-and-key systems, PACS provide centralized management of who can enter which doors, when, and under what conditions – with full audit trails.
Modern PACS have evolved from proprietary on-premise controllers to cloud-managed platforms that support mobile credentials, biometric authentication, and deep integration with video surveillance, visitor management, and identity providers.
A typical PACS deployment includes:
- Credentials – physical or digital tokens that identify a person (proximity cards, smart cards, key fobs, mobile phone credentials, biometric templates)
- Readers – devices at entry points that capture credential data (proximity readers, smart card readers, fingerprint scanners, facial recognition cameras, QR code scanners)
- Controllers – hardware panels that make access decisions and drive door locks (door controllers, intelligent panels, edge devices)
- Management software – the central platform for configuring policies, managing users, and reviewing audit logs
- Locks and hardware – electric strikes, magnetic locks, motorized locks, turnstiles, barrier gates
The information on these pages was researched by a combination of human review and large language models. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. Use this catalogue only as a starting point for your own research, and review any tool carefully against your own requirements before relying on it. Catalogue data version 2026.197.
Comparison
Tool Categories
Tools are organized by market segment:
| Category | Tools |
|---|---|
| Open Source | Open Access Control |
| Cloud-Native | Kisi, Brivo, Verkada, Openpath, PDK, UniFi Access |
| Enterprise | Genetec Synergis, LenelS2, HID ORIGO, Gallagher, Honeywell Pro-Watch, JCI C-CURE, ICT Protege |
| SMB / Mid-Market | Paxton, SALTO |
Core Features Comparison
| Feature | Open Access Control | Kisi | Brivo | Verkada | Genetec | LenelS2 | HID ORIGO |
|---|---|---|---|---|---|---|---|
| Card credentials | DIY | Yes | Yes | Yes | Yes | Yes | Yes |
| Mobile credentials | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Biometric | No | No | Partner | Yes | Partner | Partner | Partner |
| PIN keypad | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Schedules | Basic | Yes | Yes | Yes | Yes | Yes | Yes |
| Zones | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Anti-passback | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Lockdown | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Elevator control | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Multi-site | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Visitor integration | No | Yes | Yes | Yes | Yes | Yes | Yes |
| Video integration | No | Yes | Partner | Native | Native | Yes | Partner |
| Mustering | No | No | No | Yes | Yes | Yes | No |
| Feature | Gallagher | Paxton | SALTO | Honeywell | JCI C-CURE | Openpath | PDK | ICT Protege |
|---|---|---|---|---|---|---|---|---|
| Card credentials | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Mobile credentials | Yes | Yes | Yes | No | No | Yes | Yes | Yes |
| Biometric | Yes | No | No | Partner | Partner | No | No | Partner |
| PIN keypad | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Schedules | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Zones | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Anti-passback | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Lockdown | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Elevator control | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Multi-site | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Visitor integration | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Video integration | Yes | Yes | Yes | Yes | Yes | Yes | Partner | Yes |
| Mustering | Yes | No | No | Yes | Yes | No | No | Yes |
Protocol Support Comparison
| Tool | OSDP | Wiegand | ONVIF | BACnet |
|---|---|---|---|---|
| Open Access Control | No | Yes | No | No |
| Kisi | Yes | Yes | No | No |
| Brivo | Yes | Yes | No | No |
| Verkada | Yes | Yes | Yes | No |
| Genetec Synergis | Yes | Yes | Yes | Yes |
| LenelS2 | Yes | Yes | Yes | Yes |
| HID ORIGO | Yes | Yes | No | No |
| Gallagher | Yes | Yes | Yes | Yes |
| Paxton | Yes | Yes | No | No |
| SALTO | SALTO proto | Wiegand* | No | No |
| Honeywell Pro-Watch | Yes | Yes | Yes | Yes |
| JCI C-CURE | Yes | Yes | Yes | Yes |
| Openpath | Yes | Yes | No | No |
| PDK | Yes | Yes | No | No |
| ICT Protege | Yes | Yes | Yes | Yes |
* = SALTO uses its own wireless protocol (SALTO Virtual Network / SVN) for wireless locks; Wiegand supported on wired readers.
SSO / OIDC Comparison
OIDC is the preferred SSO protocol. The Authentik Notes column records compatibility with the Authentik identity provider.
| Tool | OIDC | SAML | SCIM | Authentik Notes |
|---|---|---|---|---|
| Open Access Control | No | No | No | No SSO support |
| Kisi | Yes | Yes | Yes | Full Authentik integration |
| Brivo | No | Yes | Yes | SAML via Authentik |
| Verkada | No | Yes | Yes | SAML via Authentik |
| Genetec Synergis | No | SAML* | No | Limited; AD-focused |
| LenelS2 | No | SAML* | No | Limited; AD-focused |
| HID ORIGO | Yes | Yes | Yes | Full Authentik integration |
| Gallagher | No | Yes | No | SAML via Authentik |
| Paxton | No | No | No | No SSO support |
| SALTO | No | Yes | No | SAML via Authentik (Space) |
| Honeywell Pro-Watch | No | No | No | AD integration only |
| JCI C-CURE | No | No | No | AD integration only |
| Openpath | Yes | Yes | Yes | Full Authentik integration |
| PDK | No | Yes | No | SAML via Authentik |
| ICT Protege | No | No | No | AD integration only |
SAML* = SAML via third-party integration or add-on module
Best SSO support: Kisi, HID ORIGO, and Openpath offer the strongest identity integration with OIDC + SAML + SCIM, making them the best fit for Authentik-managed environments.
Deployment Comparison
| Tool | Type | On-Premise | Cloud | Hybrid | Docker |
|---|---|---|---|---|---|
| Open Access Control | DIY | Yes | No | No | No |
| Kisi | Cloud | No | Yes | No | No |
| Brivo | Cloud | No | Yes | No | No |
| Verkada | Cloud | No | Yes | No | No |
| Genetec Synergis | On-Prem | Yes | Yes* | Yes | No |
| LenelS2 | On-Prem | Yes | Yes* | Yes | No |
| HID ORIGO | Cloud | No | Yes | Yes | No |
| Gallagher | On-Prem | Yes | Yes* | Yes | No |
| Paxton | On-Prem | Yes | Yes | Yes | No |
| SALTO | Hybrid | Yes | Yes | Yes | No |
| Honeywell | On-Prem | Yes | No | No | No |
| JCI C-CURE | On-Prem | Yes | No | No | No |
| Openpath | Cloud | No | Yes | No | No |
| PDK | Cloud | No | Yes | No | No |
| ICT Protege | On-Prem | Yes | Yes* | Yes | No |
* = cloud management layer available but core system is on-premise
Advanced Features Comparison
| Feature | Kisi | Brivo | Verkada | Genetec | LenelS2 | Openpath |
|---|---|---|---|---|---|---|
| REST API | Yes | Yes | Yes | Yes | Yes | Yes |
| Webhooks | Yes | Yes | Yes | No | No | Yes |
| Mobile app | Yes | Yes | Yes | Yes | Yes | Yes |
| Occupancy counting | Yes | No | Yes | Yes | Yes | No |
| Tailgating detection | No | No | Yes | Yes | No | No |
| Wireless locks | Partner | Partner | No | Partner | Partner | No |
| Intercom | Yes | No | Yes | Yes | No | Yes |
| Touchless access | Yes | Yes | Yes | No | No | Yes |
| Threat lockdown | Yes | Yes | Yes | Yes | Yes | Yes |
| Global anti-passback | Yes | Yes | Yes | Yes | Yes | Yes |
API Comparison
| Tool | REST API | Webhooks | SDK | API Docs | Rate Limits |
|---|---|---|---|---|---|
| Open Access Control | No | No | No | No | N/A |
| Kisi | Yes | Yes | Yes | Public | Standard |
| Brivo | Yes | Yes | Yes | Public | Standard |
| Verkada | Yes | Yes | No | Public | Standard |
| Genetec Synergis | Yes | No | Yes | Partner | N/A |
| LenelS2 | Yes | No | Yes | Partner | N/A |
| HID ORIGO | Yes | Yes | Yes | Public | Standard |
| Gallagher | Yes | No | Yes | Partner | N/A |
| Paxton | Yes | No | No | Limited | N/A |
| SALTO | Yes | Yes | No | Partner | Standard |
| Honeywell | Limited | No | No | Partner | N/A |
| JCI C-CURE | Limited | No | Yes | Partner | N/A |
| Openpath | Yes | Yes | Yes | Public | Standard |
| PDK | Yes | Yes | No | Public | Standard |
| ICT Protege | Yes | No | Yes | Partner | N/A |
Monitoring Integration Comparison
| Tool | SNMP | Syslog | API Metrics | Telegraf Input |
|---|---|---|---|---|
| Open Access Control | No | No | No | No |
| Kisi | No | No | Yes | Via API |
| Brivo | No | No | Yes | Via API |
| Verkada | No | Syslog | Yes | Via API |
| Genetec Synergis | Yes | Yes | Yes | Via SNMP |
| LenelS2 | Yes | Yes | Yes | Via SNMP |
| HID ORIGO | No | No | Yes | Via API |
| Gallagher | Yes | Yes | Yes | Via SNMP |
| Paxton | No | No | Limited | No |
| SALTO | No | No | Yes | Via API |
| Honeywell | Yes | Yes | Limited | Via SNMP |
| JCI C-CURE | Yes | Yes | Limited | Via SNMP |
| Openpath | No | No | Yes | Via API |
| PDK | No | No | Yes | Via API |
| ICT Protege | Yes | Yes | Yes | Via SNMP |
Pricing Comparison
| Tool | Free Tier | Paid Starting | Model |
|---|---|---|---|
| Open Access Control | Full (OSS) | N/A | Free |
| Kisi | No | ~$5/door/mo | Per door/mo |
| Brivo | No | ~$8/door/mo | Per door/mo |
| Verkada | No | ~$200/door/yr* | Per door + license |
| Genetec Synergis | No | Contact | Per door license |
| LenelS2 | No | Contact | Per door license |
| HID ORIGO | No | Contact | Per door/mo |
| Gallagher | No | Contact | Per door license |
| Paxton | Included* | N/A | Hardware cost |
| SALTO | No | Contact | Per door/mo |
| Honeywell | No | Contact | Per door license |
| JCI C-CURE | No | Contact | Per door license |
| Openpath | No | ~$6/door/mo | Per door/mo |
| PDK | No | ~$6/door/mo | Per door/mo |
| ICT Protege | No | Contact | Per door license |
* = Verkada pricing includes hardware + software license; Paxton software is included with hardware purchase.
Tools
32 tools.
Abloy CLIQ / PROTEC CLIQ
Abloy is a Finnish lock manufacturer and a subsidiary of ASSA ABLOY. Its traditional mechanical platform uses the distinctive disc-detainer mechanism (rather than pin tumblers), offering pick-resistance and durability that has made Ablo…
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
BEST Access Systems
BEST Access Systems – founded in 1921 and for most of its history called simply “BEST Lock” – is the originator and dominant name in Small Format Interchangeable Core (SFIC), the mechanical locking standard most commonly associated wi…
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Brivo
Brivo is a pioneer in cloud-based access control, founded in 2002 as one of the first companies to offer access control as a service (ACaaS).
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
CIC Key Wizard
Key Wizard from CIC is one of the long-established master-keying and key- inventory software packages used in the professional locksmith and facilities-management trades.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
CyberLock
CyberLock, developed by Videx, pioneered the passive-cylinder, powered-key category of electro-mechanical access control.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Deister electronic proxSafe
deister electronic is a German RFID and security-technology vendor whose proxSafe product line covers electronic key cabinets, locker systems, and specialized asset- management hardware.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
dormakaba (eCLIQ, evolo)
dormakaba is a Swiss-German access-and- security group formed from the 2015 merger of Dorma (doors, closers, mechanical) and Kaba (high-security mechanical and electronic locking).
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Gallagher
Gallagher Security is a New Zealand-based manufacturer of integrated security solutions, with its Command Centre platform serving as a comprehensive access control, intrusion detection, and perimeter security system.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Genetec Synergis
Genetec Synergis is the access control component of Genetec’s Security Center unified security platform.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
HandyTrac
HandyTrac is the category leader in multifamily real-estate key management in the United States.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
HID ORIGO
HID ORIGO is HID Global’s cloud-connected platform for managing mobile credentials, readers, and firmware across HID hardware, complementing third-party physical access control systems.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
Honeywell Pro-Watch
Honeywell Pro-Watch is an enterprise-grade physical access control system from Honeywell Building Technologies.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
HPC KeyRite (and HPC Key-Control Products)
HPC is a long-established US manufacturer of locksmith tools – key-cutting machines, code-origination machines (the classic HPC 1200PCH), master-key design aids, and related hardware.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
ICT Protege
ICT (Integrated Control Technology) is a New Zealand-based manufacturer of integrated access control, intrusion detection, and building automation systems.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
iLOQ
iLOQ is a Finnish electronic access-control system whose cylinders are battery-free, harvesting power from key insertion (S5) or a smartphone’s NFC field (S50), managed via iLOQ Manager cloud or on-premise.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
InstaKey
InstaKey is the category leader in the US for rekey-on-demand mechanical key control. The product combines three elements that, taken together, are distinct from traditional restricted-keyway offerings:
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Johnson Controls C-CURE
C-CURE 9000 is an enterprise access control and security management platform from Johnson Controls (JCI).
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Kisi
Kisi is a cloud-native physical access control platform for modern workplaces, offering mobile credentials, cloud-managed door controllers, a REST API, and OIDC/SAML/SCIM identity integration.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
LenelS2
LenelS2 is an enterprise physical access control platform owned by Carrier Global (formerly part of United Technologies).
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Medeco (XT, eCylinder, and Restricted Mechanical)
Medeco is one of the most recognized names in high-security mechanical locks in North America and a subsidiary of ASSA ABLOY.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Morse Watchmans
Morse Watchmans is a long-established US vendor in the key-control and asset-management space, dating back to 1882.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: OIDC
Mul-T-Lock (SMARTair, MT5+, Interactive+)
Mul-T-Lock is an Israeli-founded lock manufacturer (now part of ASSA ABLOY) known globally for its telescopic pin tumbler mechanical high-security platform.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Open Access Control
Open Access Control is a community-driven, open-source physical access control project built on Arduino and ESP32 microcontrollers.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: native · SSO: none
Openpath
Openpath (now part of Motorola Solutions, acquired 2021) is a cloud-native access control platform designed for modern commercial spaces.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
Paxton
Paxton is a UK-based manufacturer of access control and door entry systems, founded in 1985, offering the Net2 on-premise and Paxton10 cloud-hybrid platforms with software included at hardware purchase.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
PDK (ProdataKey)
ProdataKey (PDK) is a cloud-managed access control platform built around a dealer channel, offering mobile credentials, card and OSDP readers, and multi-site management.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Real Time Networks (KeyTracer / AssetTracer)
Real Time Networks, headquartered in Canada, develops the KeyTracer electronic key-control product line and the AssetTracer locker product line.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
SALTO
SALTO Systems is a Spanish manufacturer of electronic access control solutions, founded in 2001 in the Basque Country.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
SimpleK
SimpleK is a Canadian-originated mechanical key-management and master-keying software package, positioned as a modern alternative to legacy packages like ProMaster Key Manager (a product whose discontinuation pushed many North American inst…
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Traka
Traka is an intelligent electronic key and asset management system from ASSA ABLOY, using RFID-tagged iFobs and networked cabinets with authenticated release and full audit logging of every key movement.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
UniFi Access
UniFi Access is Ubiquiti’s physical access control system, integrated into the UniFi ecosystem alongside UniFi Network, UniFi Protect (video surveillance), and UniFi Talk (VoIP).
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: OIDC
Verkada
Verkada is a cloud-managed building security platform that integrates access control, video surveillance, environmental sensors, and guest management into a single unified platform.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
