Auth
Authentication services and libraries.
Tool | Category | Segment | Platform | Plan | Monthly Price USD | Billing Model | Free Tier / Trial | Included Active Users | Overage / Usage Pricing | Dormancy / Enforcement | Auth Methods | MFA / Passkeys | Social / Enterprise SSO | Organizations / Tenants | M2M / API Auth | Custom Domains / Branding | SDKs / Framework Fit | Data Ownership / Self-hosting | Support / SLA | Best Fit | Main Limits / Caveats |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
No tagline | Auth | Hosted developer auth | Clerk | Hobby | $0 | Free hosted plan | ✓ | 50,000 monthly retained users (MRUs) per app; 100 monthly retained organizations per app | Required upgrade after free allowances; paid MRU overages start on Pro/Business | One-month grace period after exceeding MRU/MRO allowances | Passwords, email codes, email links, usernames, Web3 wallets, prebuilt UIs | Passkeys and MFA not included on Hobby production | Up to 3 social connections; enterprise connections not included | B2B auth included with 100 MRO and up to 20 members per organization | API keys and M2M token allowances included | Clerk branding remains on prebuilt UIs | Strong Next.js/React/Expo support plus web SDKs | Hosted only; user exports available from dashboard | Community support | Fast MVPs and personal apps needing polished auth UI | Free tier is based on retained users, not every signup; production security features require paid plans |
No tagline | Auth | Hosted developer auth | Clerk | Pro | $25/mo | Subscription + usage overages | Pro features testable in development | 50,000 MRUs per app included | $0.02 per MRU from 50,001-100,000; lower rates at higher volumes; add-ons billed separately | No hard sleep; billing starts when production uses paid features/usage | Everything in Hobby plus more production auth controls | Passkeys, MFA, custom password requirements included | Unlimited social connections; 1 enterprise connection per app then paid connection tiers | B2B auth included; enhanced B2B add-on starts at $100/mo | API keys and M2M allowances with metered overages | Remove Clerk branding; satellite domains $10/mo each | Best-in-class for React/Next.js/SaaS UI speed | Hosted only; user exports available | Email support included | Production SaaS apps that want managed user management quickly | MRU and organization add-ons can become the real cost driver for B2B SaaS |
No tagline | Auth | Hosted developer auth | Clerk | Business | $300/mo | Subscription + usage overages | ✕ | 50,000 MRUs per app included; 10 dashboard seats | Same MRU overage ladder; additional dashboard seats $20/mo each | No hard sleep | All Pro auth features plus business compliance posture | Passkeys and MFA included | Enterprise connection included; additional enterprise connections use paid tiers | B2B auth included; enhanced B2B add-on optional | API keys and M2M allowances with metered overages | Branding removed; more observability retention | React/Next.js-heavy production teams | Hosted only; data export supported | Priority email/support included; SOC2/HIPAA items listed on plan | Growing SaaS teams needing compliance signals without sales contract | Enterprise is custom and excluded; Business still has usage and add-on costs |
No tagline | Auth | CIAM platform | Auth0 | Free | $0 | Free hosted plan | ✓ | Up to 25,000 monthly active users | Must choose a paid plan after passing free MAU threshold | No credit card needed; custom domain requires card verification | Universal Login, passwordless, database users, social login | Passkeys listed in comparison; advanced MFA on paid tiers | Unlimited social connections; 1 enterprise connection with self-service SSO/SCIM shown on Free | 5 organizations | 1,000 M2M auth allowance in comparison | 1 custom domain; brand customization included | Broad SDKs, standards-heavy integrations, many enterprise docs | Hosted public cloud; export via dashboard extension or Management API | Community support | Apps that may need enterprise identity features later | Paid plan selector can be confusing because visible prices are shown at small MAU selections |
No tagline | Auth | CIAM platform | Auth0 | Essentials | $35/mo | Subscription; MAU tier selection in pricing UI | ✕ | Pricing page example shows up to 500 MAU at $35/mo | Higher MAU tiers available in self-serve pricing; SAML/OIDC and B2B features may require upgrades | No sleep | Everything in Free plus higher auth/API/feature limits | Pro MFA included | Unlimited social; enterprise connection features require B2B/enterprise plan note | 10 organizations | 1,000 M2M auth allowance; no M2M add-on | 1 custom domain; login customization | Large SDK/documentation ecosystem | Hosted; data export via dashboard/API | Standard support | Small production apps already standardizing on Auth0 | At scale, MAU pricing can become expensive; SSO/SCIM gated by plan/use case |
No tagline | Auth | CIAM platform | Auth0 | Professional | $240/mo | Subscription; MAU tier selection in pricing UI | ✕ | Pricing page example shows up to 500 MAU at $240/mo | Custom user/SSO tiers available; M2M add-on available | No sleep | Everything in Essentials plus existing user database login | Enterprise MFA and enhanced attack protection | Unlimited social; enterprise connection details depend on selected B2C/B2B use case | 10 organizations in comparison for non-enterprise rows | 5,000 M2M auth allowance; M2M add-on available | 1 custom domain; more log retention | Enterprise-friendly SDKs, Actions, Marketplace | Hosted; export supported | Standard support; higher support via enterprise options | Teams that need Auth0 security features before enterprise contract | Professional is still self-serve but many advanced capabilities are add-ons or enterprise |
No tagline | Auth | Firebase / Google auth | Firebase Authentication | Spark | $0 | No-cost Firebase plan | ✓ | Other Authentication services included; Identity Platform no-cost quotas show 50K MAUs and 50 SAML/OIDC MAUs | Phone Auth billed per SMS; Identity Platform overages use Google Cloud pricing | No sleep; Firebase quotas and project limits apply | Email/password, phone, Google/Apple/Facebook/GitHub and other provider sign-in | MFA/passkeys require Identity Platform / related Google Cloud capabilities | Social login included; SAML/OIDC has 50 MAU no-cost quota under Identity Platform | No native B2B org model like Clerk/Kinde; use custom claims/Firestore/app logic | Service-to-service auth handled by Google Cloud IAM, not Firebase Auth user pools | Firebase hosted UI; custom domains mostly app/hosting concern | Mobile and web SDKs; excellent Flutter/Android/iOS fit | Hosted Google service; user export/import tooling exists | Community/docs support | Mobile apps and Firebase-first web apps | Phone/SMS auth can create variable costs; B2B org features are not first-class |
No tagline | Auth | Firebase / Google auth | Firebase Authentication | Blaze / Identity Platform | $0 subscription | Google Cloud pay-as-you-go | No fixed monthly plan | No-cost up to 50K MAUs; SAML/OIDC no-cost up to 50 MAUs | Then Google Cloud Identity Platform pricing; phone auth billed per SMS sent | No sleep | Firebase Auth plus Identity Platform enterprise options | MFA and advanced auth features through Identity Platform capabilities | SAML/OIDC supported with small no-cost quota | No native SaaS tenant billing model; Google Cloud identity model is lower-level | Cloud IAM/service accounts for service auth | Hosted/customizable auth flows; branding depends on implementation | Best for Firebase/GCP-native apps | Hosted; export via Firebase/Admin tooling | Google Cloud support depends on plan | Production Firebase apps that need paid quotas and Google Cloud services | Costs spread across Firebase and Google Cloud meters; budget alerts are needed |
No tagline | Auth | BaaS-integrated auth | Supabase Auth | Free | $0 | Free Supabase project plan | ✓ | 50,000 MAUs included; unlimited total users | Upgrade to Pro for higher MAU and paid add-ons; Free project database pauses after inactivity | Supabase Free projects pause after 1 week of inactivity | Email/password, magic links, OTP, anonymous sign-ins, social OAuth, custom OAuth/OIDC | Basic MFA included; phone MFA advanced add-on not on Free | Social providers included; SAML SSO not on Free | No full B2B org product; model teams/tenants in Postgres with RLS | JWT-based APIs; Auth hooks and custom access token hook available | Custom SMTP included; Supabase branding in auth emails cannot be removed on Free | Great with Postgres/RLS, JS/Flutter/native SDKs | User data lives in your Supabase Postgres project; self-hostable stack exists | Community support | Apps that want auth tightly coupled to Postgres permissions | Free auth is generous but tied to Free project database/resource limits |
No tagline | Auth | BaaS-integrated auth | Supabase Auth | Pro | $25/mo | Subscription + usage | ✕ | 100,000 MAUs included; unlimited total users | $0.00325 per additional MAU; SSO MAU beyond 50 at $0.015; phone MFA add-on $75/mo first project | Paid projects do not pause | Everything in Free plus production controls | Basic MFA included; leaked password protection, session limits/timeouts included | Social OAuth included; SAML SSO has 50 included then per-MAU charge | Build organizations in database/application layer | Auth hooks; custom JWT/access token hooks; service role keys for backend | Remove Supabase branding from emails; custom SMTP | Best with Supabase DB, Edge Functions, Storage | Data in your Postgres; self-host possible but managed pricing differs | Email support | Full-stack apps already using Supabase as backend | Auth pricing is simple, but advanced MFA/SSO and database compute add separate costs |
No tagline | Auth | BaaS-integrated auth | Supabase Auth | Team | $599/mo | Subscription + usage | ✕ | 100,000 MAUs included; unlimited total users | $0.00325 per additional MAU; SSO and MFA add-ons still apply per pricing table | Does not pause | Same managed Supabase Auth surface with team governance | Basic MFA included; more auth hooks listed than Pro | SAML SSO pricing same as paid plans; enterprise custom excluded | App-level org model still implemented by developer | Auth hooks and platform controls for teams | Branding removal included | Supabase SDKs and Postgres/RLS fit | Managed Postgres-owned auth data; self-host available separately | Team support/governance | Teams needing Supabase platform governance and longer audit logs | High base price if you only need auth; Enterprise custom excluded |
No tagline | Auth | Hosted developer auth + billing | Kinde | Free | $0 | Free hosted plan | ✓ | 10,500 MAU included; MAU free when using Kinde billing for billed users | Free caps include 5 monthly active organizations; paid upgrade for uncapped usage | No credit card required; no monthly fees on Free | Email, SMS and social login; customizable hosted UI | MFA included | Social login included; enterprise SSO requires Plus | 5 MAO included; organizations/B2B management included | M2M applications included with limits | Use your own custom domain; Kinde branding remains until Pro | 20+ language SDK support | Hosted with data residency choice; not self-hosted | Standard/community support | Indie SaaS wanting auth plus billing/feature flags together | Free is generous, but organizations and roles/permissions are capped |
No tagline | Auth | Hosted developer auth + billing | Kinde | Pro | $25/mo | Subscription + usage | ✕ | 10,500 MAU included | $0.0175 per extra MAU; $0.50 per extra MAO after 50; billed users can be free MAU | No sleep | Everything in Free plus production auth controls | MFA included; BYO SMS provider | Social login included; enterprise SSO not free until Plus | 50 MAO included; uncapped organizations | Uncapped M2M tokens; API keys | Remove Kinde branding; custom domain | 20+ language SDK support | Hosted with data residency choice | Kinde support | SaaS apps combining auth, billing, feature flags and orgs | MAU accounting changes if you use Kinde Billing, which can make comparisons tricky |
No tagline | Auth | Hosted developer auth + billing | Kinde | Plus | $75/mo | Subscription + discounted usage | ✕ | 10,500 MAU included | $0.0163 per extra MAU; $0.47 per extra MAO after 50 | No sleep | Everything in Pro plus advanced auth/authorization features | MFA included | Free enterprise SSO; domain restrictions | 50 MAO included; advanced org features | Organization-owned M2M apps and API scopes | Custom domain and no branding | 20+ language SDK support | Hosted | Higher support tier | B2B SaaS starting to need enterprise SSO | Enterprise-like B2B features still have Scale/Enterprise paths |
No tagline | Auth | Hosted developer auth + billing | Kinde | Scale | $250/mo | Subscription + discounted usage | ✕ | 10,500 MAU included | $0.0151 per extra MAU; $0.43 per extra MAO after 50 | No sleep | Everything in Plus plus per-org security controls | MFA per org, MFA workflow trigger | Enterprise SSO features plus domain allowlist/auto-join per org | 50 MAO included; custom domain/email sender per org | M2M and org-owned M2M apps | Per-org custom domains/email sender options | 20+ language SDK support | Hosted | SOC2/ISO reports listed | Scale-stage B2B SaaS that wants many org controls self-serve | High base price; SCIM shown as coming soon on source page |
No tagline | Auth | B2B auth / authz platform | Stytch | Pay as you go | $0 base | Usage-based with free allowance | ✓ | 10,000 monthly active users and AI agents; unlimited organizations; 5 SSO or SCIM connections; 1,000 M2M tokens | Pay only for usage above free allowances; SSO/SCIM extra connections $125/connection; fraud fingerprints $0.005 each | No hard caps or pricing cliffs per FAQ | OAuth, SSO, sessions, RBAC, passwordless, passkeys, user/org auth | Full authn/authz features; passkeys and MFA supported | 5 SSO or SCIM connections included | Unlimited organizations | 1,000 M2M tokens included | Brand removal and email customization $99 add-on | API-first; good for B2B SaaS and agents | Hosted; export addressed in FAQ | Community; enterprise has dedicated Slack/SLA | B2B SaaS needing SSO/SCIM early without plan gates | Only one public self-serve plan; enterprise is custom and excluded |
No tagline | Auth | B2B auth platform | Descope | Free Forever | $0 | Free hosted plan | ✓ | 7,500 MAUs; 10 tenants; 3 SSO connections; 10,000 M2M exchanges | No overages on Free; upgrade required after exceeding limits | Grace warning, then app may lose access after grace if not upgraded | All auth methods, flow builder, session management, admin widgets | MFA/step-up auth; biometrics/passkeys included | 3 SSO connections; 1 OIDC federated app | 10 tenants included | 10,000 M2M exchanges included | No Descope watermark; custom domain starts on Pro | No-code flows plus SDK/API integration | Hosted; export questions covered by provider | Community support; 99% SLA | Prototype and early B2B apps that need SSO in free tier | Free tier has hard MAU/tenant/SSO thresholds that force Pro |
No tagline | Auth | B2B auth platform | Descope | Pro | $249/mo | Annual subscription + overages | Startup plan may offer Pro free for one year | 10,000 MAUs; 35 tenants; 5 SSO connections; 50,000 M2M exchanges | $0.05 per extra MAU; $1 per extra tenant; $50 per extra SSO connection; $2 per 1,000 M2M exchanges | No sleep | Everything in Free plus production-ready controls | MFA/passkeys included | 5 SSO connections; 2 SAML/OIDC federated apps | 35 tenants included | 50,000 M2M exchanges included | Custom domain; Google One Tap; custom OIDC provider | No-code journeys plus SDK/API | Hosted | Web and Slack support; SOC2 reports; 99.99% SLA | Production B2B startups needing SSO and support | Billed annually; high floor price compared with developer-first providers |
No tagline | Auth | B2B auth platform | Descope | Growth | $799/mo | Annual subscription + overages | ✕ | 25,000 MAUs; 100 tenants; 10 SSO connections; 100,000 M2M exchanges | $0.05 per extra MAU; $1 per extra tenant; $50 per extra SSO connection; $2 per 1,000 M2M exchanges | No sleep | Everything in Pro plus advanced B2B/security | MFA/passkeys included; bot protection | 10 SSO connections; unlimited federated apps; SCIM provisioning | 100 tenants; 1M anonymous users | 100,000 M2M exchanges included | Custom domain and localization | No-code flows plus API/SDK | Hosted; multi-region data residency listed | 99.99% SLA; support essentials | Growth-stage B2B CIAM with SCIM and compliance needs | Enterprise custom and FedRAMP-style needs excluded |
No tagline | Auth | B2B auth / enterprise readiness | WorkOS | AuthKit | $0 | Free hosted user management up to usage threshold | ✓ | Up to 1 million monthly active users | $2,500/mo per additional 1M users | No credit card until ready for production; staging free | Email/password, social auth, magic auth, MFA, RBAC, organization policies | MFA with TOTP/SMS; biometric/passkey auth | Social auth included; enterprise SSO priced separately by connection | Organization auth policies and RBAC included | API auth patterns supported; WorkOS also has enterprise products | Custom domain add-on $99/mo | Good Next.js/backend SDK story for B2B SaaS | Hosted WorkOS; no self-host | Email and in-dashboard support included | B2B SaaS wanting generous user management and enterprise add-ons | SSO, Directory Sync and custom domain are separate per-connection/add-on costs |
No tagline | Auth | B2B SSO add-on | WorkOS | Single Sign-On | $125/connection | Per enterprise connection | Staging free to try | Connection price is independent of end-user count | Discounted tiers start at 16+ connections; talk to sales above 200 connections | No sleep | SAML and OIDC enterprise SSO | MFA handled through IdP/AuthKit policies | SAML/OIDC support per connection | One connection generally maps to one enterprise customer/IdP relationship | Not M2M-specific | Admin Portal included; custom branding/domain add-on separate | B2B SaaS integrations | Hosted | Included support; scale support options exist | Adding enterprise SSO to B2B products | Per-connection pricing can dominate costs even with few end users |
No tagline | Auth | Cloud IAM / user pools | Amazon Cognito | Lite | $0 base | Usage-based MAU pricing | ✓ | 10,000 MAUs/month free for Lite or Essentials direct/social sign-ins; some older accounts retain 50K MAU rules | After free tier, direct/social MAUs tier from $0.0055 per MAU in examples; SAML/OIDC above 50 MAU free tier is $0.015/MAU | No sleep | User pools, social sign-in, SAML/OIDC federation, password auth | Authenticator app/SMS MFA; advanced security add-ons separate | Social, SAML and OIDC provider integration | No SaaS org model; use app logic/groups/custom attributes | M2M token requests are add-on; no free tier for token requests | Managed login CSS customization; AWS domain/custom domains | Best for AWS-native apps | Hosted AWS service; data in AWS user pools | 99.9% SLA listed in compare tiers | Low-cost AWS-first auth when UX complexity is acceptable | Developer ergonomics and pricing details are more complex than SaaS auth tools |
No tagline | Auth | Cloud IAM / user pools | Amazon Cognito | Essentials | $0 base | Usage-based MAU pricing | ✓ | 10,000 MAUs/month free for direct/social sign-ins | $0.015 per direct/social MAU above free tier in examples; SAML/OIDC above 50 free MAUs also $0.015/MAU | No sleep | Managed Login, passwordless codes, passkeys, email/SMS options, access token customization | MFA, email OTP MFA, passkeys, passwordless | Social/SAML/OIDC integration | No native B2B SaaS org billing model | M2M token request add-on; example $0.00225 per successful token response | Managed login customization; custom domains via AWS setup | AWS SDKs and Amplify integration | Hosted AWS service | 99.9% SLA | AWS apps wanting passkeys/passwordless without third-party CIAM | M2M, SMS, SES and RPS add-ons make cost modeling multi-meter |
No tagline | Auth | Cloud IAM / user pools | Amazon Cognito | Plus | $0 base | Usage-based MAU pricing | No free direct/social MAU tier | No direct/social MAU free tier; SAML/OIDC still has 50 MAU free tier per docs | $0.020 per direct/social MAU in example; SAML/OIDC above 50 MAUs $0.015/MAU | No sleep | Everything in Essentials plus threat protection | MFA/passkeys plus adaptive authentication | Social/SAML/OIDC integration | No native B2B org product | M2M token request add-on | Managed login customization | AWS SDKs | Hosted AWS service | 99.9% SLA | AWS apps needing risk-based adaptive auth | No direct/social free tier; advanced security may be overkill for MVPs |
No tagline | Auth | Cloud IAM / external identities | Microsoft Entra External ID | Basic | $0 base | Usage-based MAU pricing | ✓ | First 50,000 monthly active users free | Pay-as-you-go after free tier; SMS phone authentication billed by country-specific transaction meters | No sleep | External user authentication for consumers and business guests | MFA and phone auth capabilities depend on configured add-ons/features | Microsoft identity, social/federated identity scenarios | External tenants/workforce guest model; not a developer SaaS org toolkit | M2M token concept documented in pricing page context | Microsoft-hosted identity experience; custom branding depends on Entra configuration | Best for Microsoft/Azure ecosystems | Hosted Microsoft Entra service | Azure/Microsoft support model | Azure-native apps and organizations already using Microsoft identity | Pricing page hides exact overage in calculator/region context; less startup-friendly UX |
No tagline | Auth | Open-source identity cloud | Ory | Developer | $0 | Free developer workspace | ✓ | 2 development environments; no production environments | Upgrade to Production for production usage and included credits | Developer/testing only | Ory Network identity stack: login, registration, sessions, OAuth2/OIDC capabilities | Password, passkeys, passwordless, SMS code, social, MFA features listed in comparison | OIDC/OAuth2 provider and social connections | No production multi-tenant environment on Developer | Permissions and M2M tokens in paid Ory Network plans | Branding/customization available in stack | API-first, standards-heavy, Go/cloud-native teams | Open-source components available; Ory Network is hosted SaaS | Developer support level | Teams evaluating Ory or building with OSS identity components | Not for production; Ory pricing uses aDAU rather than MAU |
No tagline | Auth | Open-source identity cloud | Ory | Production | $64.17/mo equivalent (billed $770/year) | Annual subscription + usage pricing | ✕ | $21 included monthly credit | $0.14 per aDAU/month; $0.007 per M2M token/month; permission checks usage priced | No sleep | Production Ory Network identity stack | Security features included; passkeys/MFA listed | Unlimited social connections; OAuth2/OIDC provider | 1 production and 3 staging environments | M2M tokens and permissions included/priced by usage | Customizable identity UI/API stack | API-first identity for teams comfortable with standards | Hosted Ory Network; OSS components separately self-hostable | Production plan support | Production apps wanting Ory without self-hosting | aDAU billing is harder to compare with MAU-based providers |
No tagline | Auth | Open-source identity cloud | Ory | Growth | $779.17/mo equivalent (billed $9,350/year) | Annual subscription + usage pricing | ✕ | $255 included monthly credit | $0.12 per aDAU/month; $0.006 per M2M token/month; permission checks usage priced | No sleep | Everything in Production plus analytics and B2B features | Security features included | B2B SSO OIDC only per pricing card | 2 production and 5 staging environments | M2M tokens and permissions included/priced by usage | Customizable identity UI/API stack | API-first standards-heavy teams | Hosted; self-hosted enterprise license is custom and excluded | Growth support and uptime commitments | Growing apps that specifically want Ory Network | High annual commitment; Enterprise and license custom tiers excluded |
No tagline | Auth | Open-source / hosted CIAM | Logto | Free | $0 | Free hosted cloud plan | ✓ | Up to 50K MAU; 50K access tokens | Upgrade to Pro after token/add-on needs; no overage on Free listed | No credit card required | User authentication, password, passwordless email/SMS, social connectors | Passkeys not on Free; MFA is Pro add-on | 3 social connectors; no enterprise SSO on Free | No organizations add-on on Free | 1 M2M app | 1 custom domain; Logto branding remains | OIDC/OAuth standards; web/backend SDKs | Open-source project; hosted Logto Cloud option | Community chat | MVPs needing 50K MAU with standards-based auth | Token quota can be hit before MAU quota depending on app architecture |
No tagline | Auth | Open-source / hosted CIAM | Logto | Pro | $24/mo | Subscription + token/add-on usage | ✕ | Unlimited MAU with 50K tokens included | $0.08 per 100 extra tokens; M2M extra app $8; enterprise SSO connector $48; MFA add-on $48; org add-on $48 | No sleep | Everything in Free plus RBAC, organizations, MFA/SSO add-ons | MFA add-on supports passkeys, TOTP, SMS, email and backup codes | Unlimited social; enterprise SSO add-on $48 per connector | Organizations add-on $48 | 1 M2M app included; $8 each extra | 1 custom domain included; hide branding on Pro | OIDC/OAuth; good for standards-first apps | Open-source core; hosted Cloud Pro | Email ticket support 48h listed | Budget-conscious teams wanting hosted open-source-ish CIAM | Usage is token-based, so high token churn can drive bills |
No tagline | Auth | Open-source/self-host auth | SuperTokens | Self-hosted | $0 + server | Free open-source core | ✓ | No free MAU count limit for open-source self-hosted core | Paid add-ons: MFA $0.01/MAU with $100/mo minimum; account linking $0.005/MAU with $100/mo minimum; dashboard users $20/user after 3 | No platform sleep; you operate infrastructure | Email/password, social login/SSO providers, magic links, SMS/email OTP, username/phone password | MFA is paid add-on | Social/custom providers; advanced SSO/multitenancy paid/contact depending use | Multitenancy and organization support is paid/see pricing | M2M listed as contact us | Full UI customization because self-hosted/open-source | Node, Python, Go and frontend recipes; framework integration via SDKs | You host and own data | Community support | Cost-sensitive teams willing to own auth infrastructure | Free core is powerful, but paid add-ons have minimum billing and ops burden |
No tagline | Auth | Managed auth service | SuperTokens | Cloud | $0.02/MAU | Usage-based managed service | ✓ | Free under 5K MAUs | $0.02 per MAU; paid feature add-ons apply; free tier rate limit 50 rps per app/IP per docs | No sleep listed; managed account rate limits apply | Same core auth features as self-hosted, managed by SuperTokens | MFA add-on $0.01/MAU with $100/mo minimum | Social and custom providers; SSO supported in feature set | Multitenancy/org support see pricing/contact | M2M contact us | Customizable UI and emails/SMS depending implementation | SDK/recipe-driven integration | Hosted by SuperTokens; self-host path remains available | Community support unless professional support purchased | Teams wanting SuperTokens without operating core services | Free under 5K MAU is simple, but add-ons/contact-us features complicate scaling |
No tagline | Auth | Self-hosted/hosted CIAM | FusionAuth | Community | $0 + server | Free self-hosted community edition | ✓ | Unlimited users/MAUs on self-hosted Community | Starter/Essentials paid plans add premium features and hosting | No platform sleep; you host it | Core authentication standards and features | Core MFA/WebAuthn coverage depends on Community feature set; advanced MFA in Starter | OIDC/OAuth/SAML support; advanced identity providers in paid tiers | Multi-tenant IAM capabilities depend on edition/features | Client credentials grant is a Starter feature | Themes/customization; self-hosted control | Java/HTTP API-centric; many framework examples | You own infrastructure and user database | Community forums, Slack, GitHub | Teams wanting mature self-hosted IAM without per-MAU fees | Operating FusionAuth is your responsibility; some common SaaS features are paid |
No tagline | Auth | Self-hosted/hosted CIAM | FusionAuth | Starter | $162/mo | Paid plan; billed monthly or annually, basic hosting included | ✕ | Pricing page selector example shown at 1,000 MAUs | Higher MAU/hosting needs change pricing; Essentials starts much higher | No sleep listed | Community plus premium authentication features | Advanced MFA and breached password detection | Advanced/gaming identity providers; SAML IdP initiated login | Entity management and client credentials grant | Machine-to-machine/client credentials included in Starter feature list | Application-specific themes | FusionAuth APIs and SDKs | FusionAuth hosting included or self-host depending setup | Community support | Production teams needing more than free self-hosted core | Starter is much pricier than pure developer auth tools at low MAU |
No tagline | Auth | Self-hosted/hosted CIAM | FusionAuth | Essentials | $2,970/mo | Paid plan; billed annually; business hosting included | ✕ | Pricing page selector example shown at 1,000 MAUs | Enterprise starts at same visible floor but is advanced/custom-like and excluded | No sleep listed | Advanced business auth features | Advanced MFA and security features | Advanced connectivity; custom OAuth scopes; SCIM in higher/enterprise feature docs | Advanced business identity features | Client credentials and advanced OAuth scopes | Themes and advanced customization | API-centric IAM | Hosted/business hosting included | Business-day email support | Businesses with serious IAM/support requirements | Too expensive for most MVPs; enterprise/custom path excluded |
No tagline | Auth | Passkey-first hosted auth | Hanko | Starter | $0 | Free hosted cloud plan | ✓ | 10,000 MAU; 2 projects | If above limit for more than one month, Hanko asks you to subscribe to higher tier | Free projects pause after 7 days with no sign of usage; reactivation from dashboard | Passkeys, passwords, passwordless | Passkeys and MFA included | Social SSO included | No deep B2B org pricing on public plan | Admin dashboard; API access limited compared with Pro | Custom domain included | Open-source Hanko Auth and Passkey API options | Can use Hanko Cloud or self-host Hanko/Passkey API | Community support | Passkey-first apps needing generous free hosted auth | Free inactivity pausing matters for low-traffic demos |
No tagline | Auth | Passkey-first hosted auth | Hanko | Pro | $29/mo | Subscription + MAU overage | ✕ | 10,000 MAU included; 5 projects | $0.01 per MAU above 10,000; SAML SSO $49/mo per connection | No inactivity pausing noted for Pro | Passkeys, passwords, passwordless | Passkeys and MFA included | Social SSO included; SAML SSO add-on | Team member invites; not a full B2B tenant platform | Admin API and webhooks included | Custom domain, custom SMTP | Open-source/self-host option remains available | Cloud or self-host; private cloud/custom license enterprise excluded | Email/Slack personal support | Production passkey-first apps | SAML is per-connection extra; enterprise/private cloud custom excluded |
No tagline | Auth | Open-source identity cloud | ZITADEL | Free | $0 | Free cloud plan | ✓ | 100 daily active users; unlimited stored users and organizations | Upgrade to Pro for higher included DAU and uptime commitments | No sleep listed | OIDC/OAuth-based identity, login, service users/agents, workflows | All security features listed; MFA/passkey capabilities in product docs | 3 identity providers included | Unlimited organizations | Service users/agents included | Data residency choices EU, US, Switzerland, Australia | SDK/API and standards-based integration | Cloud free; self-hosting exists but enterprise/commercial support is custom | Community/free support | Developers wanting open-source-friendly IAM with cloud trial | 100 DAU free cap is lower than MAU-based developer auth competitors |
No tagline | Auth | Open-source identity cloud | ZITADEL | Pro | $100/mo | Cloud subscription | ✕ | Starts with 25,000 daily active users per month included | Scale with needs; detailed calculator on pricing detail page | No sleep listed | Everything in Free plus production cloud features | Security features included | 3 identity providers included; custom domain included | Unlimited organizations | Service users/agents | Custom domain included; data residency choices | Standards-based SDK/API | Cloud-hosted; self-host/cloud enterprise custom excluded | 99.5% and 99.95% uptime guarantee text appears on pricing page; 1h response SLO | Production teams that like ZITADEL's open-source/cloud model | DAU model is less directly comparable to MAU pricing |
No tagline | Auth | TypeScript auth framework | Better Auth | Open-source framework | $0 + server/database | Free open-source framework | ✓ | No hosted-user quota; you run it on your own app/database | Managed infrastructure is optional and priced separately | No platform sleep; depends on your hosting | TypeScript authentication framework with plugin ecosystem | 2FA/passkeys/SSO supported by framework/plugins depending implementation | Social providers and SSO through framework/plugins | Multi-tenancy/org features through plugins/implementation | API auth depends on implementation/plugins | Full UI/control because self-hosted in app | Excellent TypeScript/Next.js/Nuxt/Astro-style fit | You own database and auth code path | Community/open-source support | Vibe-coded TypeScript apps that want ownership and low cost | You must understand auth/security and maintain the implementation |
No tagline | Auth | Better Auth managed infrastructure | Better Auth | Starter | $0 | Free managed infrastructure add-on | ✓ | 1 dashboard seat; 10,000 audit logs/month; 1,000 security detections/month | Upgrade to Pro for more logs, SSO/Directory Sync and email support | No sleep listed | Infrastructure around self-hosted Better Auth, not hosted auth users | Security detections included | No self-service SSO/Directory Sync on Starter | User management infrastructure; app owns auth data | Not a hosted M2M product | Dashboard infrastructure; app UI remains yours | TypeScript apps already using Better Auth | Framework is self-hosted; infrastructure augments it | Community support | Side projects using Better Auth needing dashboard/audit basics | This is not a full hosted auth service; it augments your self-hosted framework |
No tagline | Auth | Better Auth managed infrastructure | Better Auth | Pro | $20/mo | Subscription + event overages | ✕ | Unlimited dashboard seats; 20,000 audit logs/month; 10,000 security detections/month | $0.0001 per extra audit event; $0.001 per extra detection; email $0.001; SMS $0.09; SSO/Directory Sync $50/connection after 1 | No sleep listed | Managed infrastructure for Better Auth deployments | Security detection and abuse protection | 1 self-service SSO and Directory Sync connection then $50/mo each | User management dashboard features | Not a hosted user pool; app owns auth implementation | Transactional email/SMS, custom dashboard domain $25/mo add-on | Best for production TypeScript teams using Better Auth | You still self-host the framework and database | Email support | Teams wanting Better Auth ownership with audit/security infrastructure | Do not compare directly with Clerk/Auth0 hosted user pools; user auth remains in your stack |
No tagline | Auth | Web auth library | Auth.js | Free open-source | $0 + server/database | Free open-source library | ✓ | No hosted-user quota | No vendor overage; pay your infrastructure and OAuth provider costs | No platform sleep; depends on your app host | OAuth provider auth/session library for web frameworks | MFA/passkeys require your own implementation/provider support | Supports many OAuth providers; not an enterprise SSO product by itself | No built-in SaaS org billing model | API/session auth patterns depend on app implementation | Full UI/control | Next.js, SvelteKit, Express, Qwik examples; project is part of Better Auth | You own app/database/session data | Open-source community | Simple web apps using OAuth/social login | Library, not a full identity platform; no hosted user management dashboard |
No tagline | Auth | Self-hosted IAM | Keycloak | Open Source | $0 + server | Free open-source IAM | ✓ | No MAU license fee from Keycloak project | Infrastructure, operations and optional vendor support are your costs | No platform sleep; depends on your deployment | SSO, identity brokering, user federation, admin console, account console | Users can set up two-factor authentication; password policies and standard IAM features | OpenID Connect, OAuth 2.0, SAML 2.0, social login and identity brokering | Realms/clients/groups can model multi-app and tenant structures | OIDC/OAuth clients and service accounts | Themes and full self-hosted customization | Java/Quarkus IAM server; broad adapters/protocol support | You host and own data | Community support; commercial support via ecosystem/vendors | Teams that need standards-heavy self-hosted SSO/IAM | Heavy operational and configuration burden for small MVPs |