OpenTools

Open source Auth & identity

Keycloak

96 · Healthy

Identity and access management server with SSO, OIDC, SAML and user federation (CNCF).

Free to useApache-2.0★ 37kLast commit yesterday

authentik

91 · Healthy

Identity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.

Free core, paid extrasMIT★ 26kLast commit yesterday

Logto

86 · Healthy

Auth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.

Free core, paid extrasMPL-2.0★ 15kLast commit yesterday

ZITADEL

84 · Healthy

Multi-tenant identity platform with event-sourced audit trail and B2B organizations.

Free, share hosted changesAGPL-3.0Relicensed 2025★ 15kLast commit 3 days ago

Hanko

84 · Healthy

Authentication server with passkeys, passwords, social login and drop-in web components.

Free, share hosted changesAGPL-3.0★ 9.0kLast commit 4 days ago

Better Auth

83 · Healthy

TypeScript authentication framework with email and social login, passkeys, two-factor, organizations and SSO plugins.

Free to useMIT★ 30kLast commit yesterday

Ory Kratos

78 · Stable

Headless identity and user-management server with an API-first design.

Free to useApache-2.0★ 14kLast commit 2 months ago

Pocket ID

78 · Stable

Lightweight OpenID Connect provider that signs users in to your apps with passkeys only.

Free to useBSD-2-Clause★ 9.5kLast commit 2 days ago

SuperTokens

74 · Stable

Authentication backend with prebuilt UI, sessions and multi-tenancy.

Free core, paid extrasApache-2.0★ 15kLast commit 8 days ago

Authelia

71 · Stable

Single sign-on and two-factor portal that sits in front of web apps via a reverse proxy.

Free to useApache-2.0★ 29kLast commit 2 days ago

SuperTokens

Authentication backend with prebuilt UI, sessions and multi-tenancy.

Alternative to

Will it still be around?

Stable

Score 74/100

Details

Can a business use it freely?

Free core, paid extras

Apache-2.0 · open source (permissive)

Details
SuperTokens screenshot 1
SuperTokens screenshot 2
SuperTokens screenshot 3

Features compared

has,doesn't4 features

5/10 Auth0 features free in SuperTokens

✕ doesn't have it · ◐ partly · $ higher plan or paid editionBoth have 5

Headline Auth0 features on the B2C Essentials plan, and whether SuperTokens has each in its free, self-hosted edition.

Auth0 and SuperTokens, feature by feature
FeatureAuth0B2C Essentials planSuperTokens5 of 10 free
Auth0 has, SuperTokens doesn't4
Multi-factor authentication Included Paid editionPaid add-on
Organizations (B2B tenants) Included10 organizations Paid editionMulti-tenancy add-on
User management console Included PartlyFree for 3 dashboard users
OAuth 2.0 and OIDC provider Included Paid editionOAuth2 provider add-on
Both have5
Hosted login pages IncludedUniversal Login YesPre-built UI
Social login Included Yes
Passkeys and passwordless Included Yes
Roles and permissions Included Yes
Custom code in login flows IncludedActions YesBackend overrides
Neither has fully1
Breached password detection Higher planProfessional plan Paid editionAttack protection add-on

Sources

Compare every Auth0 alternative

Flat Rate Deploy

Monthly cost

SuperTokens on OpenTools
$15
Auth0
$35

You save each month

$20/mo

57% less than today

Saving from month one

You save

Over 3 years
$720
In year one
$240

List price checked 8 Oct 2026 · Source · Disclaimer

Health score: 74/100

Stable · activity, bus factor and issue responsiveness, from GitHub

Score v2 · How it works

Activity

45% weight

100/100

  • Last commit 8 days ago (100/100).
  • 560 commits in the past 12 months (100/100).
  • 50+ releases in the past 12 months (100/100).

Bus factor

30% weight

24/100

  • Top contributor wrote 82% of the last 94 commits (past 12 months).
  • 8 people authored those commits.

Responsiveness

25% weight

87/100

  • 76% of all issues are closed (144 open, 462 closed) (77/100).
  • 28 of 30 recent issues got a reply or were closed (93/100).

License

Free core, paid extras

Apache-2.0 · Open source (permissive)

What you need to do

The core is free to use. Enterprise features, kept in a separately licensed part of the code, need a paid license in production.

For SuperTokens

Everything outside ee/ is Apache-2.0. Code in ee/ needs a paid license.

Apache-2.0 (core) + commercial ee/ directory · Open source (permissive). OSI-approved license with few conditions beyond keeping the copyright notice.

License text checked 2026-10-07 · Read it

GitHub activity

Stars
15k
Forks
835
Commits, 12 mo
560
last 8 days ago
Releases, 12 mo
50+
last 35 days ago
Contributors
35
8 in last 94 commits
Open issues
144
462 closed

Snapshot from 2026-10-08

Top contributors

Points for pull requests merged into SuperTokens and reviews of them since 10 October 2025. Building something another user asked for earns more.

  1. 11,161 points
  2. 2241 points
  3. 349 points
  4. 430 points
  5. 520 points
  6. 610 points
  7. 710 points
  8. 810 points
  9. 910 points
Bespoke · we set it up$1,200onceFlat Rate Deploy$15/mo