Rock Solid Knowledge (RSK)

Name: Rock Solid Knowledge (RSK)
Brand: Rock Solid Knowledge (RSK)

We deliver software solutions for web, mobile and security.

Est 2009|14 Ref Customers

LinkedIn 500|Website|FTEs 23|HQ Hambrook, England, GB

MarketsIdentity Provider (IdP) & SSO Identity Provider (IdP) & Single Sign-On (SSO)

Published Oct 9, 2026

01Common complaints

- Organizations that want a fully managed identity SaaS - Hosted SaaS IAM providers (e.g., Auth0/Okta) are generally more suitable for organizations that seek to avoid operating identity infrastructure and can accommodate MAU-based pricing. - Organizations that require a fully integrated, self-hosted IAM product with a built-in admin console - Products such as Keycloak may be a better fit when an out-of-the-box self-hosted suite and integrated administration are required rather than assembling components. - Small teams without protocol expertise - Identity servers and component-based approaches typically require specialist knowledge; organizations lacking that expertise may find these solutions overly complex. - Organizations requiring extensive independent reviews and validation - RSK’s coverage on major review platforms is limited or ambiguous in the sources accessed; organizations that require substantial third-party validation should exercise caution. - Organizations that prefer self-service pricing - Some OpenIddictComponents products require contacting sales for production usage, which can be a procurement barrier for buyers who prefer transparent self-serve pricing. - Limited public review footprint - RSK does not appear to have an easily discoverable, high-volume presence on Gartner Peer Insights or TrustRadius based on the pages accessed; G2 results were ambiguous due to naming collisions ("Rock Solid"). - Potential pricing opacity - Contact-sales requirements for production usage of some components can slow evaluation and introduce uncertainty. - Vendor claims without independent validation - Statements about security practices, sustainability, and SLA-backed support are vendor-provided; independent validation (audit reports, incident history, third-party reviews) was not found in this research run. - Ecosystem risk - Identity frameworks are sensitive to licensing and project stewardship changes; upstream changes have in some cases forced migrations and created long-term operational risk. RSK’s Open.IdentityServer is positioned as a response to such dynamics.

Deal disqualifiers

Organizations that require a fully managed SaaS IAM with minimal operational overhead
Organizations that require formal compliance attestations and extensive third-party validation published publicly
Organizations without resources to operate identity infrastructure (on-call, patching, incident response)

Why some customers left for competitors (churn reasons)

For identity solutions generally:
- Teams frequently leave because of complexity, maintenance burden, and licensing/pricing friction (especially when moving from open-source to commercial models).
- Some teams migrate to OpenIddict, Keycloak, or SaaS offerings (for example, widely known cloud identity providers) depending on organizational constraints.

02Why they buy

- Security-focused and maintenance emphasis - RSK presents services that emphasize ongoing maintenance, security patching, and technical-debt management. - Ethical/sustainability differentiation - RSK is a Certified B Corporation, which may be relevant for organizations with vendor ESG requirements. - Ecosystem specialization - IdentityServer.com describes RSK as a maintainer and contributor to Open.IdentityServer and as a provider of add-ons and services; community posts show vendor engagement in developer forums. - Where competitors have advantages - Auth0/Okta: enterprise compliance programs and managed operations (at corresponding cost) - Keycloak: integrated product experience and broad ecosystem adoption - Duende: vendor-supported commercial framework and official documentation

Why customers chose this product over alternatives (inferred from ecosystem conversations)

Buyers who prefer self-hosted, .NET-native identity solutions often select frameworks/components because:
- They need on-prem/private deployment rather than a SaaS IAM
- They require deep customization and protocol-level control
- They want to avoid per-active-user SaaS pricing models

03Field reports

Important context about review availability:

RSK is primarily a services firm plus niche developer-focused components; mainstream software review platforms may have limited or no coverage for such vendors, or coverage may be fragmented across product lines.

Gartner Peer Insights

Attempts to locate RSK reviews on Gartner Peer Insights returned general Peer Insights pages/resources, not RSK-specific review listings in the pages accessed for this research.

G2

A G2 “Rock Solid” seller page exists, but it appears to refer to a different “Rock Solid” entity and not clearly to Rock Solid Knowledge (RSK) as a digital agency/identity components vendor. Results are therefore ambiguous and should be treated with caution.

TrustRadius

No RSK product listing on TrustRadius was found in accessible results during this run.
Note on platform credibility: some third-party commentary indicates disputes or complaints about incentive programs and review rejection on the platform; this context should be considered when weighting TrustRadius results generally.

Community/Social (Reddit) — direct quotes (RSK/IdentityServer ecosystem)

- Evidence of vendor participation and product usage: - A .NET subreddit thread includes a representative identifying themselves as from Rock Solid Knowledge (associated with IdentityServer and OpenIddict components). This indicates vendor engagement in developer community discussions. - In discussions about IdentityServer4 and forks, commenters reference RSK-maintained third-party components and an OpenIddict version of an Admin UI product; some references note a no-cost option for smaller companies. - Critical/negative sentiment commonly seen in identity ecosystem discussions (not always about RSK directly, but relevant to the space RSK sells into): - Pricing frustration and concerns about complexity for self-hosted identity solutions and commercial licensing are common themes. - Example ecosystem criticism: some developers describe IdentityServer as complex and its configuration as unintuitive; such perceptions can affect demand for add-ons and service partners.

Availability

This research did not locate RSK-hosted case studies with quantified outcomes on the pages accessed.

Critical evaluation

Because measurable case studies (with methodology) were not retrieved here, it is not possible to validate ROI/impact claims beyond vendor-provided statements.
Recommended buyer requests:
- Named references with comparable scope (Umbraco upgrade, identity platform build, SAML federation project)
- Delivery metrics (timeline, defect rates, security testing approach)
- Post-launch support KPIs (patch SLAs, response times)

04Best fit

Company sizes

Agency (Umbraco/web): mid-market organizations and public-sector entities that fund ongoing support/maintenance (typically mid-market sized, but can vary).
Identity/components: engineering-driven organizations with .NET teams, typically modest-to-mid engineering headcounts; teams with SSO needs (B2B) or regulated environments requiring self-hosting.

Industries and verticals

Public sector, education, nonprofits, and mid-market enterprises are common buyers of Umbraco agency services (inference based on typical Umbraco use cases).
SaaS and enterprise IT building custom authentication platforms are prime users of identity components.

Roles and personas

Decision makers:
- CTO / VP Engineering
- Head of Platform Engineering / Security Engineering
- Digital Director / Head of Web (for Umbraco projects)
End users:
- Backend engineers and security engineers
- DevOps/SRE running the identity platform
- Content editors/marketing teams (for Umbraco sites)

Pain points addressed

Need for consistent security maintenance and patching discipline
Need for SSO/identity infrastructure with customization and self-hosting
Need for SAML/SCIM/Admin tooling without building those features entirely in-house

05The pitch

What the product does (core value proposition in objective terms)

- Rock Solid Knowledge (RSK) is a UK-based digital agency and engineering firm that builds and maintains websites (notably Umbraco CMS projects) and implements identity/security solutions for web and mobile applications. The company provides long-term maintenance, security patching, accessibility, and performance services. - In addition to services, RSK operates product lines in the identity/SSO ecosystem via affiliated sites, most notably IdentityServer.com (for Open.IdentityServer and Duende IdentityServer add-ons/services) and OpenIddictComponents.com (commercial components for OpenIddict such as SAML2P, Admin UI, and SCIM).

Target market and market positioning

- Agency/services side: organizations needing Umbraco implementations, upgrades, integrations, performance/accessibility work, and ongoing managed support. - Identity/products side: .NET teams building authentication/authorization platforms (OIDC/OAuth2/SAML) who want component-level solutions (e.g., Admin UI, SAML2P, SCIM) rather than a hosted SaaS identity provider. - Market positioning emphasizes: - A security-focused approach and ongoing patching/maintenance - Ethical/sustainability positioning (B Corp) - Specialization in IdentityServer/OpenIddict ecosystem

Get a comprehensive analysis of Rock Solid Knowledge (RSK) including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →