{"licence":"CC BY 4.0","licenceUrl":"https://creativecommons.org/licenses/by/4.0/","citation":"Ambera Forge, Authentication services, September 2026","report":"https://forge.ambera.app/sectors/auth-as-a-service/2026-09","note":"Counts are over the companies Forge read in this sector during the month, each with its denominator. Themes and capabilities are the words the reading listed; a theme with no declared match shares no word with anything a company declares, which is not the same as no product doing it. Carried market-size figures are their publishers’ and are not redistributed here.","version":1,"monthKey":"2026-09","sector":{"slug":"auth-as-a-service","name":"Authentication services","scope":"Hosted sign-in, sessions and user management an app calls instead of owning."},"coverage":{"entities":7,"readEntities":7,"neverRead":0,"readInMonth":7,"lastReadAt":"2026-09-30T20:43:23.272Z"},"withheldReason":null,"declaredCapabilities":[{"name":"Passwordless authentication","listing":2,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr","cmuohfle7002tofmyeze9ziz0"]},{"name":"1M free monthly active users","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Actions/extensibility (custom logic)","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Adaptive MFA","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"Agent Auth (AI agent identity)","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Application, Email, and Admin Logs","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Attack protection & bot detection","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Audit Logs","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Audit logs (Team plan)","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Auth for GenAI / AI agent authentication","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Authentication","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"AuthKit user management","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"B2B SaaS SSO/SCIM","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"Branching / preview environments","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"BYO Cloud deployment (Enterprise)","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Clerk Billing (Stripe-based subscriptions)","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Custom domains","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Custom domains and branding","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Device fingerprinting / fraud prevention","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"Directory Sync (SCIM)","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Edge Functions (Deno)","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"email verification and password reset","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Email/branding customization","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"Enterprise SLA & HIPAA/BAA support","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"Enterprise SLA & private deployment","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Enterprise SSO (SAML/OIDC)","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Enterprise SSO (SAML/OIDC) connections","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Enterprise SSO / SAML / OIDC","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"Feature Flags","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"File storage","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Fine-grained authorization","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"Free up to 50,000 monthly retained users","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"HIPAA compliance (Team/Enterprise)","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"M2M authentication","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"MFA/2FA","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Multi-factor authentication","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Multi-framework SDKs (Next.js, Astro, TanStack, React Router)","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Organization & RBAC management","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"Organizations / B2B auth","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Organizations / B2B multi-tenant support","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"Passwordless / passkeys","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"passwordless/magic link login","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Point-in-time recovery","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Postgres database","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"pre-built sign-in/sign-up UI components","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Prebuilt sign-up/sign-in/profile UI components","listing":1,"denominator":7,"entityIds":["cmuohfl23002kofmy9sswu53g"]},{"name":"Read replicas","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Realtime subscriptions","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Secure Agentic AI workflows","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"self-hosting option","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Self-hosting via Docker/CLI","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"session management","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Single sign-on / organizations (B2B)","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Social connections","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"social/federated login","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Spend cap / cost control","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"SSO (Team plan)","listing":1,"denominator":7,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Universal Login","listing":1,"denominator":7,"entityIds":["cmuohfl53002mofmymua1vgja"]},{"name":"Universal Login / branded login","listing":1,"denominator":7,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"Usage-based / organization-based pricing","listing":1,"denominator":7,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Usage-based free tier","listing":1,"denominator":7,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"usage-based free-tier MAU pricing","listing":1,"denominator":7,"entityIds":["cmuohflgv002vofmy7ijefty3"]}],"complaintThemes":[{"name":"Complex setup relative to competitors","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"complexity of advanced features (MFA, SAML) on self-built systems","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Costs increase notably beyond free tier for larger customer bases","listing":1,"denominator":5,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"credit-based pricing unpredictability (Lovable, adjacent)","listing":1,"denominator":5,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"Frequent outages / bugs","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"M2M token costs as add-on","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"MAU-based pricing growth penalty","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"migration difficulty away from managed provider","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"per-connection SSO/Directory Sync costs scale steeply for large enterprises","listing":1,"denominator":5,"entityIds":["cmuohfla8002qofmymj0r32pw"]},{"name":"Pricing can grow unpredictably as usage/enterprise adoption scales","listing":1,"denominator":5,"entityIds":["cmuohfl7q002oofmyiime2otr"]},{"name":"pricing scales sharply at higher MAU tiers","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"security risk of DIY implementations","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"SSO connection limits forcing expensive upgrades","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"time cost of building auth from scratch","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]},{"name":"Unpredictable price hikes post-Okta acquisition","listing":1,"denominator":5,"entityIds":["cmuohfle7002tofmyeze9ziz0"]},{"name":"usage-based overage unpredictability (compute/egress/MAU meters)","listing":1,"denominator":5,"entityIds":["cmtkp40ba003lpsp7yl9y19gd"]},{"name":"vendor lock-in risk","listing":1,"denominator":5,"entityIds":["cmuohflgv002vofmy7ijefty3"]}],"whiteSpace":{"rows":[],"unansweredCount":0,"belowFloor":17},"entities":[{"id":"cmuohfl23002kofmy9sswu53g","slug":"clerk","name":"Clerk","kind":"competitor","site":"https://clerk.com","lastWatchedAt":"2026-09-30T19:18:09.995Z","addedBy":"definition"},{"id":"cmuohfl53002mofmymua1vgja","slug":"auth0","name":"Auth0","kind":"competitor","site":"https://auth0.com","lastWatchedAt":"2026-09-30T20:43:23.272Z","addedBy":"definition"},{"id":"cmuohfl7q002oofmyiime2otr","slug":"stytch","name":"Stytch","kind":"competitor","site":"https://stytch.com","lastWatchedAt":"2026-09-30T19:18:09.995Z","addedBy":"definition"},{"id":"cmuohfla8002qofmymj0r32pw","slug":"workos","name":"WorkOS","kind":"competitor","site":"https://workos.com","lastWatchedAt":"2026-09-30T19:18:09.995Z","addedBy":"definition"},{"id":"cmtkp40ba003lpsp7yl9y19gd","slug":"supabase","name":"Supabase","kind":"adjacent","site":"https://supabase.com","lastWatchedAt":"2026-09-02T22:55:45.450Z","addedBy":"definition"},{"id":"cmuohflgv002vofmy7ijefty3","slug":"solo-builders-adding-sign-in","name":"Solo builders adding sign-in","kind":"segment","site":null,"lastWatchedAt":"2026-09-30T19:18:09.995Z","addedBy":"definition"},{"id":"cmuohfle7002tofmyeze9ziz0","slug":"auth-pricing-at-scale","name":"Auth pricing at scale","kind":"discourse","site":null,"lastWatchedAt":"2026-09-30T19:18:09.995Z","addedBy":"definition"}],"entrants":{"placed":[{"id":"cmuohfl23002kofmy9sswu53g","name":"Clerk","kind":"competitor","addedBy":"definition","addedAt":"2026-09-30T19:12:29.039Z"},{"id":"cmuohfl53002mofmymua1vgja","name":"Auth0","kind":"competitor","addedBy":"definition","addedAt":"2026-09-30T19:12:29.149Z"},{"id":"cmuohfl7q002oofmyiime2otr","name":"Stytch","kind":"competitor","addedBy":"definition","addedAt":"2026-09-30T19:12:29.247Z"},{"id":"cmuohfla8002qofmymj0r32pw","name":"WorkOS","kind":"competitor","addedBy":"definition","addedAt":"2026-09-30T19:12:29.333Z"},{"id":"cmtkp40ba003lpsp7yl9y19gd","name":"Supabase","kind":"adjacent","addedBy":"definition","addedAt":"2026-09-30T19:12:29.381Z"},{"id":"cmuohflgv002vofmy7ijefty3","name":"Solo builders adding sign-in","kind":"segment","addedBy":"definition","addedAt":"2026-09-30T19:12:29.574Z"},{"id":"cmuohfle7002tofmyeze9ziz0","name":"Auth pricing at scale","kind":"discourse","addedBy":"definition","addedAt":"2026-09-30T19:12:29.481Z"}],"sighted":[]},"entries":{"observed":35,"inference":0,"sourceBroken":1,"byTag":[{"tag":"FACT","count":24},{"tag":"COMPANY CLAIM","count":4},{"tag":"USER OPINION","count":7}],"byCategory":[{"category":"PRODUCT","count":14},{"category":"PRICING","count":13},{"category":"COMPLAINT","count":4},{"category":"DISCOURSE","count":2},{"category":"FUNDING","count":1},{"category":"POSITIONING","count":1}]},"pricing":{"readEntities":7,"withPricing":7,"changesInMonth":13,"companiesChangedInMonth":7,"withheldReason":null,"companies":[{"entityId":"cmuohfl53002mofmymua1vgja","name":"Auth0","kind":"competitor","site":"https://auth0.com","changesInMonth":1,"latest":{"claim":"Baseline pricing structure (from third-party trackers, not directly fetched from auth0.com/pricing): Free tier up to ~25,000 MAU; B2C Essentials ~$35/mo, B2C Professional ~$240/mo; B2B Essentials ~$150/mo, B2B Professional ~$800/mo; Enterprise is custom-quoted with 99.99% SLA and private deployment options.","tag":"COMPANY CLAIM","sourceUrl":"https://www.saasworthy.com/blog/auth0-pricing-plans-guide","observedAt":"2026-09-30T20:43:23.272Z"}},{"entityId":"cmuohfl23002kofmy9sswu53g","name":"Clerk","kind":"competitor","site":"https://clerk.com","changesInMonth":2,"latest":{"claim":"Clerk's free Hobby plan covers up to 50,000 monthly retained users (up from a prior 10,000 MAU tier retired February 5, 2026), with Pro starting at $20/mo billed annually (or $25/mo monthly) including 50K MRUs plus one Enterprise SSO connection, and Business starting at $250/mo billed annually (or $300/mo monthly).","tag":"FACT","sourceUrl":"https://clerk.com/pricing","observedAt":"2026-09-30T19:18:09.995Z"}},{"entityId":"cmuohfl7q002oofmyiime2otr","name":"Stytch","kind":"competitor","site":"https://stytch.com","changesInMonth":2,"latest":{"claim":"Stytch's pricing page states it offers 10,000 free monthly active users and AI agents, unlimited organizations, 5 SSO or SCIM connections, 1,000 M2M tokens, and the full authn/authz feature suite for $0/month, with usage-based overage pricing above these thresholds and no hard caps or pricing cliffs.","tag":"FACT","sourceUrl":"https://stytch.com/pricing","observedAt":"2026-09-30T19:18:09.995Z"}},{"entityId":"cmuohfla8002qofmymj0r32pw","name":"WorkOS","kind":"competitor","site":"https://workos.com","changesInMonth":3,"latest":{"claim":"WorkOS's official pricing page states organization-based, usage-scaling pricing: the first 1 million active users are free, with Pay as You Go plans offering automatic volume discounts, and higher tiers ('Annual Credits') adding pre-pay credit discounts, a 99.99% uptime SLA, guided migration, and guaranteed support SLA.","tag":"FACT","sourceUrl":"https://workos.com/pricing.md","observedAt":"2026-09-30T19:18:09.995Z"}},{"entityId":"cmuohflgv002vofmy7ijefty3","name":"Solo builders adding sign-in","kind":"segment","site":null,"changesInMonth":1,"latest":{"claim":"Free-tier MAU thresholds vary widely across providers commonly recommended to solo builders: Supabase Auth is free up to roughly 50,000 MAUs with a $25/month Pro plan covering 100,000 MAUs, Firebase Auth's Spark plan is free to about 50,000 MAUs, and Clerk offers a free tier of about 10,000 MAUs before costs rise sharply at scale (estimated ~$1,825 at 100K MAUs).","tag":"FACT","sourceUrl":"https://www.nucamp.co/blog/top-10-authentication-services-and-libraries-in-2026-from-free-to-enterprise","observedAt":"2026-09-30T19:18:09.995Z"}},{"entityId":"cmuohfle7002tofmyeze9ziz0","name":"Auth pricing at scale","kind":"discourse","site":null,"changesInMonth":1,"latest":{"claim":"BASELINE: Auth0's free plan covers up to 25,000 monthly active users, with Essentials starting at $35/month for 500 MAU (B2C) and $150/month for 500 MAU (B2B), and Professional starting at $240/month (B2C, 1,000 MAU) or $800/month (B2B, 1,000 MAU); Enterprise is custom-priced.","tag":"FACT","sourceUrl":"https://auth0.com/pricing","observedAt":"2026-09-30T19:18:09.995Z"}},{"entityId":"cmtkp40ba003lpsp7yl9y19gd","name":"Supabase","kind":"adjacent","site":"https://supabase.com","changesInMonth":3,"latest":{"claim":"Supabase's current pricing structure is Free ($0, 2 projects, 500MB database, 50,000 MAUs, 5GB egress, auto-pause after 1 week idle), Pro ($25/month bundling Auth, Storage, Edge Functions, Realtime, and Postgres), Team ($599/month with higher MAU limits, SSO, audit logs), and custom-priced Enterprise with HIPAA and BYO-cloud options.","tag":"FACT","sourceUrl":"https://supabase.com/pricing","observedAt":"2026-09-02T22:55:45.450Z"}}]},"funding":{"quartersConsidered":8,"readQuarters":1,"totalRounds":1,"currencies":[],"withheldReason":"Withheld: something was read in 1 of the last 8 quarters. A series needs at least 2 to say anything a single reading does not.","quarters":[]},"marketSize":{"readAt":null,"publishers":[]}}