Best forDropping prebuilt sign-in, profile and organization UI into a React or Next.js app.
Trade-offPer-user pricing grows with you; users live in Clerk, not your database.
Used by 305 makers' products for this
SuperTokens alternatives
Not a ranking: each option is described by the situation it fits, with its trade-off, whether it's open source or free to start, whether AI coding agents can work with it, and how many makers' products use it for this job.
9 open source or self-hostable18 with a free tier16 ready for AI agents
On Product Hunt, people weigh SuperTokens against: Clerk, Descope, WorkOS, Stytch, Auth0, PropelAuth. Some solve a neighbouring job rather than the same one.
For authentication
The whole decision →Hosted service or library in your own app. Hosted services give you UI, MFA and security updates for a monthly bill and some lock-in; libraries keep users in your own database for free, and you own the upkeep.
SuperTokens (Open-source service): Open-source auth with prebuilt login UI and backend SDKs, self-hosted for free or on their cloud. Trade-off: The core runs as a separate service next to your backend; MFA and some features are paid add-ons on the cloud.
Best forComplex identity needs and enterprise compliance.
Trade-offHeavier to configure and pricier than newer options for a solo project.
Used by 21 makers' products for this
Best forB2B SaaS that will need enterprise SSO and directory sync.
Trade-offIts free tier covers basic sign-in, but enterprise SSO and directory sync are priced per connection — worth it once a customer pays for them.
Used by 20 makers' products for this
Best forApps already on Supabase — auth is part of the same project as the database.
Trade-offLess polished UI components than dedicated auth services.
Used by 13 makers' products for this
Best forTypeScript apps that want users and sessions in their own database, at no cost.
Trade-offYou host it and keep it patched; UI is yours to build.
Used by 7 makers' products for this
Best forMobile and client-heavy apps already using Firebase.
Trade-offTies your user model to Google's ecosystem.
Used by 4 makers' products for this
Best forAuth that also covers feature flags and organizations in one place.
Used by 7 makers' products for this
Best forB2B products where every customer is an organization with members, roles, invites and SAML.
Trade-offPaid plans start well above hobby budgets once you pass the free tier; users live in PropelAuth, not your database.
Used by 7 makers' products for this
Stytch
Hosted serviceFree tierllms.txt
Best forPasswordless sign-in (magic links, one-time codes, passkeys) and B2B SSO through APIs, free up to 10,000 monthly active users.
Trade-offNow part of Twilio, which says nothing changes for now; overage prices aren't published, and users live in Stytch, not your database.
Used by 5 makers' products for this
Open sourceFree tier
Best forA self-hosted identity server with SSO, OpenID Connect, SAML and user federation for several apps at once.
Trade-offA heavy Java server to run, upgrade and theme; more admin console than a small app usually needs.
Used by 3 makers' products for this
Best forA Clerk-style developer experience you can also self-host.
Trade-offYounger ecosystem than the incumbents.
Used by 2 makers' products for this
Logto
Open-source serviceBest forOpen-source OIDC auth with hosted sign-in pages, organizations and roles, on a cloud with 50,000 free monthly active users or on your own servers.
Trade-offRuns as a separate auth server your app redirects to, rather than components inside your pages; smaller community than the incumbents.
Used by 2 makers' products for this
Descope
Hosted serviceBest forLogin, MFA and SSO flows designed in a visual drag-and-drop editor instead of code.
Trade-offThe jump from the free tier to the first paid plan ($249/mo billed annually) is steep for a solo project; flows live in Descope's editor, not your repo.
Used by 1 makers' products for this
Frontegg
Hosted serviceFree tierllms.txt
Best forB2B SaaS that wants a ready-made admin portal where each customer manages its own users, roles and SSO.
Trade-offPaid pricing past 7,500 monthly active users isn't published; built for multi-tenant B2B, so it's more than a consumer app needs.
Used by 1 makers' products for this
Open sourceFree tier
Best forExisting Next.js apps built on NextAuth, and teams that want OAuth sign-in with users in their own database.
Trade-offThe project is now part of Better Auth, which offers a migration guide; v5 has stayed in beta for a long time, and features like two-factor or organizations are yours to build.
No maker product tracked for this yet
Amazon Cognito
Hosted serviceFree tierFrom $0.015 per MAU (Essentials) after 10,000 free
Best forUser sign-up and sign-in for apps already built on AWS, with a permanent free tier of 10,000 monthly active users.
Trade-offHosted login pages and error messages are hard to customise, some user pool settings can't be changed after creation, and exporting users with their passwords isn't supported.
No maker product tracked for this yet
Best forAn open-source identity server with organizations (multi-tenancy), passkeys and SSO built in, as a hosted cloud or on your own servers.
Trade-offAGPL license for self-hosting; a full identity server is more to run and learn than an auth library in your app.
No maker product tracked for this yet
Open sourceFree tierFrom $5 per internal user/mo, $0.02 per external user/mo (Enterprise, billed annually)llms.txt
Best forA self-hosted identity provider that adds single sign-on in front of many apps, via OIDC, SAML, LDAP or a proxy.
Trade-offSelf-hosted only, with no hosted plan; built more for SSO across apps than for sign-up flows inside a customer-facing product.
No maker product tracked for this yet
BoxyHQ
Library in your appBest forAdding enterprise SAML SSO and SCIM directory sync to an existing login system, self-hosted for free.
Trade-offOry acquired BoxyHQ and now ships it as Ory Polis; it handles SSO only, not sign-up, sessions or passwords, and you run and patch it yourself.
No maker product tracked for this yet