# Authelia vs Logto

**Leader by vioscaleAI score:** Authelia

| Attribute | Authelia | Logto |
|---|---|---|
| **vioscaleAI score** | 59.9 (41% (low)) | 54.6 (69% (medium)) |
| activity.commits_last_30d | 100 | 100 |
| adoption.dependent_repos | 0 | 11 |
| adoption.github_stars | 29,254 | 14,683 |
| content.faq | `[{"answer":"A lightweight, open-source authentication system that enables multi-factor authentication and single sign-on for web applications. It integrates with reverse proxies to control access and comes with a web-based portal for user and access management. It is indexed under Auth & Identity Software.","source":"https://www.authelia.com","question":"What is Authelia?","confidence":0.6},{"answer":"Authelia is open source, so it can be self-hosted and used at no licence cost. It is released under the Apache-2.0 licence. Pricing changes often, so verify at source before relying on it.","source":"https://www.authelia.com","question":"Is Authelia free to use?","confidence":0.6},{"answer":"Authelia supports the web, Linux and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://www.authelia.com","question":"What platforms does Authelia support?","confidence":0.6},{"answer":"Yes. Authelia can be deployed on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.authelia.com","question":"Can Authelia be self-hosted?","confidence":0.6},{"answer":"We have confirmed 49 integrations for Authelia, including 1Password, Active Directory, Ansible AWX, Apache Guacamole, Argo CD, Bitwarden, BookStack and Budibase, plus 41 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.authelia.com","question":"What does Authelia integrate with?","confidence":0.6},{"answer":"Yes. Authelia is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/authelia/authelia","question":"Is Authelia open source?","confidence":0.95}]` | `[{"answer":"A developer-focused identity infrastructure that handles user authentication, authorization, and access control across web, mobile, and server applications. Built on standard protocols including OIDC, OAuth 2.1, and SAML with native support for multi-tenancy, enterprise single sign-on, and role-based access control. It is indexed under Auth & Identity Software.","source":"https://logto.io/de/pricing","question":"What is Logto?","confidence":0.6},{"answer":"Logto is open source, so it can be self-hosted and used at no licence cost. It is released under the MPL-2.0 licence. A commercial or hosted edition starts at $0.08. Prices are published openly on the vendor's own pricing page. Pricing changes often, so verify at source before relying on it.","source":"https://logto.io/de/pricing","question":"Is Logto free to use?","confidence":0.6},{"answer":"Logto supports the web, iOS, Android and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://logto.io/de/pricing","question":"What platforms does Logto support?","confidence":0.6},{"answer":"Yes. Logto can be deployed cloud / SaaS and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://logto.io/de/pricing","question":"Can Logto be self-hosted?","confidence":0.6},{"answer":"We have confirmed 11 integrations for Logto, including Google, Apple, Discord, GitHub, Facebook, Azure AD, Okta and Cloudflare Turnstile, plus 3 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://logto.io/de/pricing","question":"What does Logto integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 for Logto. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Logto not holding them. Always confirm compliance directly before you rely on it.","source":"https://logto.io","question":"What security certifications does Logto have?","confidence":0.48},{"answer":"Yes. Logto is published under the MPL-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/logto-io/logto","question":"Is Logto open source?","confidence":0.95},{"answer":"Logto is available worldwide. The vendor is headquartered in the United States.","source":"https://logto.io/de/pricing","question":"Where is Logto available?","confidence":0.75}]` |
| deployment.options | `{"cloud":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | Authelia is a self-hosted identity and access management solution that enables centralized authentication and authorization across multiple applications. It supports multi-factor authentication, passwordless login via WebAuthn, and works as an OpenID Connect provider. | A developer-focused identity infrastructure that handles user authentication, authorization, and access control across web, mobile, and server applications. Built on standard protocols including OIDC, OAuth 2.1, and SAML with native support for multi-tenancy, enterprise single sign-on, and role-based access control. |
| features.capabilities | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"self","saml_sso":false,"hosted_ui":"hosted","open_source":true,"passwordless":true,"social_login":false,"passkeys_webauthn":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` |
| integrations.count | 135 | 12 |
| integrations.list | `[{"name":"1Password"},{"name":"Active Directory"},{"name":"Ansible AWX"},{"name":"Apache Guacamole"},{"name":"Argo CD"},{"name":"Bitwarden"},{"name":"BookStack"},{"name":"Budibase"},{"name":"Caddy"},{"name":"Chronograf"},{"name":"Coder"},{"name":"Docker"},{"name":"Drupal"},{"name":"EspoCRM"},{"name":"Express.js"},{"name":"FreeIPA"},{"name":"FreshRSS"},{"name":"Gitea"},{"name":"GitLab"},{"name":"GLAuth"},{"name":"Grafana"},{"name":"HAProxy"},{"name":"Harbor"},{"name":"HashiCorp Vault"},{"name":"Headscale"},{"name":"HedgeDoc"},{"name":"Homarr"},{"name":"Home Assistant"},{"name":"Immich"},{"name":"Jellyfin"},{"name":"Jenkins"},{"name":"Jira"},{"name":"Kanboard"},{"name":"Kasm Workspaces"},{"name":"Kubernetes"},{"name":"LDAP"},{"name":"Leantime"},{"name":"LibreChat"},{"name":"Linkding"},{"name":"Linkwarden"},{"name":"LLDAP"},{"name":"Mailcow"},{"name":"Mastodon"},{"name":"Matomo"},{"name":"Mattermost"},{"name":"Mealie"},{"name":"MeshCentral"},{"name":"Miniflux"},{"name":"Nextcloud"},{"name":"NGINX"},{"name":"Cloudflare Zero Trust","native":true},{"name":"Rocket.Chat","native":true},{"name":"Vaultwarden","native":true},{"name":"WordPress","native":true},{"name":"Odoo","native":true},{"name":"Traefik","native":true}]` | `[{"name":"Google"},{"name":"Apple"},{"name":"Discord"},{"name":"GitHub"},{"name":"Facebook"},{"name":"Azure AD"},{"name":"Okta"},{"name":"Google One Tap"},{"name":"Google reCAPTCHA Enterprise"},{"name":"Cloudflare Turnstile"},{"name":"SMS services"},{"name":"SMTP email"},{"name":"HTTPS email"},{"name":"Microsoft Azure AD","native":true,"category":"sso","direction":"inbound"},{"name":"WhatsApp","native":true,"category":"communications","direction":"outbound"},{"name":"Aliyun SMS","native":true,"category":"communications","direction":"outbound"},{"name":"Aliyun Direct Mail","native":true,"category":"communications","direction":"outbound"},{"name":"MailJunky","native":true,"category":"communications","direction":"outbound"},{"name":"SMSBao","native":true,"category":"communications","direction":"outbound"},{"name":"WeCom","native":true,"category":"communications","direction":"outbound"},{"name":"OAuth","native":true,"category":"sso","direction":"inbound"},{"name":"OIDC","native":true,"category":"sso","direction":"inbound"},{"name":"SAML","native":true,"category":"sso","direction":"inbound"}]` |
| language.primary | Go | TypeScript |
| license.spdx | Apache-2.0 | MPL-2.0 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"cli":true,"web":true}` |
| pricing | `{"type":"open_source","summary":"Open source","freeTier":true,"sourceUrl":"https://www.authelia.com","retrievedAt":"2026-08-14T08:35:22.241Z"}` | `{"type":"hybrid","plans":[{"free":true,"name":"Free","summary":"$0/mo","features":["Audit logs","User management"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"contactSales":false},{"free":false,"name":"Pro","summary":"From $24/mo + token usage","features":["50K free tokens per month","Token-based usage billing beyond free tier"],"components":[{"kind":"fixed","amount":24,"period":"month","currency":"USD"}],"contactSales":false}],"summary":"Free tier available; paid plans from $24/mo with token-based usage billing.","currency":"USD","freeTier":true,"sourceUrl":"https://logto.io/pricing","retrievedAt":"2026-09-14T13:21:24.983Z","startingPrice":{"amount":24,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | open_source | freemium |
| pricing.price_level | free | low |
| pricing.starting_price | - | `{"amount":24,"currency":"USD"}` |
| pricing.transparent | yes | no |
| release.cadence_days | 5 | 29 |
| release.history | `[{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.28","date":"2026-09-17T12:13:30Z","type":"stable","version":"v4.39.28"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.27","date":"2026-09-15T09:49:03Z","type":"stable","version":"v4.39.27"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.26","date":"2026-09-12T14:00:10Z","type":"stable","version":"v4.39.26"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.25","date":"2026-09-10T12:44:03Z","type":"stable","version":"v4.39.25"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.24","date":"2026-09-09T11:52:31Z","type":"stable","version":"v4.39.24"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.23","date":"2026-09-08T11:22:50Z","type":"stable","version":"v4.39.23"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.22","date":"2026-09-03T08:28:58Z","type":"stable","version":"v4.39.22"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.21","date":"2026-09-03T01:54:43Z","type":"stable","version":"v4.39.21"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.20","date":"2026-05-26T10:26:19Z","type":"stable","version":"v4.39.20"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.19","date":"2026-04-12T07:25:12Z","type":"stable","version":"v4.39.19"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.18","date":"2026-04-10T01:33:54Z","type":"stable","version":"v4.39.18"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.17","date":"2026-04-09T12:01:47Z","type":"stable","version":"v4.39.17"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.16","date":"2026-03-14T08:28:15Z","type":"stable","version":"v4.39.16"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.15","date":"2025-11-29T12:13:04Z","type":"stable","version":"v4.39.15"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.14","date":"2025-11-09T07:18:40Z","type":"stable","version":"v4.39.14"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.13","date":"2025-10-12T05:45:48Z","type":"stable","version":"v4.39.13"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.12","date":"2025-10-08T08:03:01Z","type":"stable","version":"v4.39.12"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.11","date":"2025-10-01T11:42:23Z","type":"stable","version":"v4.39.11"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.10","date":"2025-09-15T09:11:13Z","type":"stable","version":"v4.39.10"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.9","date":"2025-09-09T22:48:24Z","type":"stable","version":"v4.39.9"}]` | `[{"url":"https://github.com/logto-io/logto/releases/tag/v1.45.0","date":"2026-10-13T07:52:46Z","type":"stable","version":"v1.45.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.44.0","date":"2026-09-30T07:20:33Z","type":"stable","version":"v1.44.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.43.0","date":"2026-08-31T11:56:01Z","type":"stable","version":"v1.43.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.42.0","date":"2026-07-30T04:16:00Z","type":"stable","version":"v1.42.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.41.0","date":"2026-06-30T08:09:25Z","type":"stable","version":"v1.41.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.40.1","date":"2026-05-29T10:38:46Z","type":"stable","version":"v1.40.1"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.40.0","date":"2026-05-29T07:41:41Z","type":"stable","version":"v1.40.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.39.0","date":"2026-04-30T02:55:56Z","type":"stable","version":"v1.39.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.38.0","date":"2026-03-31T10:45:02Z","type":"stable","version":"v1.38.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.37.1","date":"2026-02-28T09:31:48Z","type":"stable","version":"v1.37.1"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.37.0","date":"2026-02-28T03:40:27Z","type":"stable","version":"v1.37.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.36.0","date":"2026-01-30T06:46:50Z","type":"stable","version":"v1.36.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.35.0","date":"2025-12-30T09:43:29Z","type":"stable","version":"v1.35.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.34.0","date":"2025-11-28T05:34:41Z","type":"stable","version":"v1.34.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.33.0","date":"2025-10-31T06:54:33Z","type":"stable","version":"v1.33.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.32.0","date":"2025-09-30T06:37:14Z","type":"stable","version":"v1.32.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.31.0","date":"2025-08-29T08:55:14Z","type":"stable","version":"v1.31.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.30.1","date":"2025-07-31T17:12:43Z","type":"stable","version":"v1.30.1"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.29.0","date":"2025-06-27T05:47:28Z","type":"stable","version":"v1.29.0"},{"url":"https://github.com/logto-io/logto/releases/tag/v1.28.0","date":"2025-05-26T13:25:04Z","type":"stable","version":"v1.28.0"}]` |
| reliability.status_page | - | yes |
| security.certifications | `[{"name":"OpenID Certified","status":"active"}]` | `[{"name":"SOC 2","status":"active"}]` |
| security.disclosure_policy | yes | yes |
| security.scorecard | 9.6 | - |
| security.soc2 | - | yes |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fauthelia%2Fauthelia&per_page=100","last_12m":0,"max_severity":null}` | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40logto%2Fphrases-ui&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Auth & Identity Software)

| Capability | Authelia | Logto |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Self-hosted only | Cloud + self-hosted |
| **Methods** |  |  |
| Social login | ✗ | ✓ |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | ✓ | ✓ |
| Multi-factor auth | ✓ | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✗ | ✓ |
| SCIM provisioning | - | ✓ |
| B2B / multi-tenancy | - | ✓ |
| **Standards** |  |  |
| OpenID Connect provider | ✓ | ✓ |
| **Delivery** |  |  |
| Hosted UI | Hosted | Both |
| **Access** |  |  |
| RBAC | ✓ | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-16T19:05:45.051Z. "-" = undocumented, not absent.*