It is real, and it is one of the longest-standing self-hosted trackers in affiliate marketing, not a fly-by-night tool. Keitaro, from Apliteni, installs on your own Linux server, routes your ad clicks through it, and tracks clicks, cost, conversions and ROI while distributing traffic across landing pages and offers by GEO, device, browser and schedule and syncing conversions back to Meta, TikTok and Google. You will regret buying it only if you are not ready to run a VPS, expected it to track out of the box, or spend too little for the licence plus server upkeep to beat a cheap cloud tracker. For a serious media buyer at real volume who wants to own their data and stop paying per event, it is a genuine long-term home.
It is at its best for high-volume affiliate and media buyers who want a proven self-hosted tracker with hands-on support. That is the lens the rest of this review uses: not whether it is the biggest tool on the market, but whether it is the right one for that operator.
What Keitaro is
Keitaro is a self-hosted performance-marketing tracker made by Apliteni. You install it on your own Linux server, point your campaign links through it, and it records every click, its cost, the conversion and the revenue, then shows you which ad, placement, GEO, device or landing page actually made money. On top of tracking it does the media buyer's daily job: it distributes traffic across landing pages and offers by rules you set, rotates creatives, split-tests landers, and sends conversions back to the ad platforms. It sits in the same category as Voluum and RedTrack, but the delivery is the opposite. Those are cloud services you rent; Keitaro is software you own and host.
It is not a new or unproven tool. Keitaro's own site says more than 4,000 businesses use it, and long-term reviews routinely describe two or more years of continuous use. So the first question a cautious buyer asks, whether it is real, has a clear answer: yes. The harder question is whether it is right for you, and that turns almost entirely on whether you are ready to run a server.
What it does day to day
The core is traffic routing. Keitaro calls the routing units streams and flows: you build filters on GEO, device, browser, mobile operator, connection type and time of day, then send matching visitors to the landing page or offer you choose, with weighted rotation for split tests. Around that sit the pieces a paid-traffic operator lives in:
- Server-to-server postbacks to read conversions back from affiliate networks, with SubID and click-ID passing end to end.
- Conversion sync (CAPI) to Meta, TikTok and Google Ads, so the platforms optimise against real outcomes instead of a browser pixel that iOS keeps breaking.
- More than 35 tracking parameters, a Click API and an Admin API for wiring Keitaro into a CRM, store or reporting stack.
- Fast, multi-level reports on clicks, uniques, cost, conversions, EPC, CR and ROI, exportable to CSV, HTML or JSON.
- Built-in bot filtering, capping and auto-disabling of weak offers, custom tracking domains, white-label reports and a landing-page editor.
None of this is exotic for the category. What buyers report is that Keitaro does it quickly and holds up at high click volume, which is the whole reason to self-host in the first place.
The self-hosting reality, and the real cost
This is where most regret comes from, so be honest with yourself before you buy. Keitaro needs a clean VPS: the docs require CentOS 9 or 10 Stream, KVM virtualisation, at least 20 GB of SSD and at least 4 GB of RAM, with more CPU and memory as your clicks per day climb. Install is a single script, and support will help, but the work does not end there. You still stand up tracking domains and SSL, wire traffic-source and affiliate-network templates, configure postbacks or CAPI, keep the tracker and the server patched, and take backups before you update, because a bad reboot mid-update can corrupt the database.
The sharpest complaints follow directly from this. Reviewers describe 502 errors on server-to-server conversion tracking and slow resolution, and those are usually a sign of an under-provisioned or oversold VPS rather than a fault in Keitaro itself. On a cloud tracker, uptime is the vendor's problem. Here, part of it is yours. A media buyer who already runs servers will find that a fair trade for owning the data; a solo operator who has never touched Linux will find it a real tax. Budget for both sides of the bill: the licence starts at EUR 40 a month billed yearly, and the VPS to run it on is a separate, ongoing cost. There is no free trial, though a public live demo lets you try the interface first.
Where it fits against the cloud trackers
The decision is rarely Keitaro versus one specific rival. It is self-hosted versus cloud. Below roughly USD 10,000 to 20,000 a month in spend, clean server-side events plus Meta CAPI and Google Enhanced Conversions cover most of what a tracker buys you, and a managed cloud tool such as RedTrack or Voluum saves you the server. Keitaro earns its place once your click volume is high enough that a cloud tracker's per-event pricing starts to hurt, and once owning your data is worth the upkeep. Its closest peer is Binom, the other big self-hosted tracker. Both remove the event cap and put the data on your box. Keitaro is the more routing-and-support-led of the two; Binom leans on raw throughput and a flat licence at extreme volume. If you want that ownership without running any server at all, a cloud tracker wins instead. See the full ranking on our best ad tracking software guide, or weigh the departures on the Keitaro alternatives page.
Is it safe to run?
One thing a careful buyer will find, so it belongs here: security researchers have documented that Keitaro's traffic-distribution system has been abused by bad actors in malware and cloaking campaigns. That is a statement about how criminals misuse a general routing tool, not about the legitimacy of using Keitaro to track and optimise honest campaigns, and the vendor says it will block licences on law-enforcement requests. The practical takeaway is narrow: the toolset has a reputation on some strict ad networks, so keep your redirects clean and your use compliant, which is sound advice for any traffic-distribution system.
Who should buy it, and who should not
Buy Keitaro if you are already running paid traffic seriously, especially pop, push, native, sweepstakes or nutra, you expect enough volume that event-priced cloud trackers become annoying, and you are comfortable running a VPS or paying someone who is. You will not regret it: the tracking is deep, the price is fair, and the support is the thing users praise most. Hold off, for now, if you are still validating your first offer, spend a little each day, or do not want to touch Linux, DNS, SSL and backups. In that case a managed cloud tracker is the honest starting point, and Keitaro is where you graduate once the numbers make ownership pay.
