# Auth.js (NextAuth.js) vs Authelia

**Leader by Vioscale score:** Authelia

| Attribute | Auth.js (NextAuth.js) | Authelia |
|---|---|---|
| **Vioscale score** | 54.8 (47% (low)) | 64.4 (41% (low)) |
| activity.commits_last_30d | 7 | 100 |
| adoption.dependent_repos | 6,629 | 0 |
| adoption.github_stars | 28,345 | 28,711 |
| adoption.package_downloads_weekly | 5,865,070 | - |
| deployment.options | `{"self_hosted":true}` | `{"on_prem":true,"self_hosted":true}` |
| description.long | An open-source authentication solution that integrates with web frameworks to provide OAuth-based authentication with customizable sign-in pages. | A lightweight, open-source authentication system that enables multi-factor authentication and single sign-on for web applications. It integrates with reverse proxies to control access and comes with a web-based portal for user and access management. |
| features.capabilities | `{"hosting":"self","hosted_ui":"headless","open_source":true,"social_login":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"self","saml_sso":false,"hosted_ui":"hosted","open_source":true,"passwordless":true,"social_login":false,"passkeys_webauthn":true}` |
| integrations.count | 1 | 135 |
| integrations.list | `[{"name":"GitHub"}]` | `[{"name":"1Password"},{"name":"Active Directory"},{"name":"Ansible AWX"},{"name":"Apache Guacamole"},{"name":"Argo CD"},{"name":"Bitwarden"},{"name":"BookStack"},{"name":"Budibase"},{"name":"Caddy"},{"name":"Chronograf"},{"name":"Coder"},{"name":"Docker"},{"name":"Drupal"},{"name":"EspoCRM"},{"name":"Express.js"},{"name":"FreeIPA"},{"name":"FreshRSS"},{"name":"Gitea"},{"name":"GitLab"},{"name":"GLAuth"},{"name":"Grafana"},{"name":"HAProxy"},{"name":"Harbor"},{"name":"HashiCorp Vault"},{"name":"Headscale"},{"name":"HedgeDoc"},{"name":"Homarr"},{"name":"Home Assistant"},{"name":"Immich"},{"name":"Jellyfin"},{"name":"Jenkins"},{"name":"Jira"},{"name":"Kanboard"},{"name":"Kasm Workspaces"},{"name":"Kubernetes"},{"name":"LDAP"},{"name":"Leantime"},{"name":"LibreChat"},{"name":"Linkding"},{"name":"Linkwarden"},{"name":"LLDAP"},{"name":"Mailcow"},{"name":"Mastodon"},{"name":"Matomo"},{"name":"Mattermost"},{"name":"Mealie"},{"name":"MeshCentral"},{"name":"Miniflux"},{"name":"Nextcloud"},{"name":"NGINX"}]` |
| language.primary | TypeScript | Go |
| license.spdx | ISC | Apache-2.0 |
| platform.support | `{"web":true}` | `{"cli":true,"web":true,"linux":true}` |
| pricing | `{"type":"open_source","summary":"Free and open source","freeTier":true,"sourceUrl":"https://authjs.dev","retrievedAt":"2026-08-14T11:04:51.520Z"}` | `{"type":"open_source","summary":"Open source","freeTier":true,"sourceUrl":"https://www.authelia.com","retrievedAt":"2026-08-14T08:35:22.241Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | open_source |
| pricing.price_level | free | free |
| pricing.transparent | - | yes |
| release.cadence_days | - | 16 |
| release.history | `[{"url":"https://github.com/nextauthjs/next-auth/releases/tag/next-auth%404.24.15","date":"2026-07-20T23:22:47Z","type":"stable","version":"next-auth@4.24.15"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/xata-adapter%401.11.3","date":"2026-07-20T21:54:07Z","type":"stable","version":"@auth/xata-adapter@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/upstash-redis-adapter%402.11.3","date":"2026-07-20T21:54:09Z","type":"stable","version":"@auth/upstash-redis-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/unstorage-adapter%402.11.3","date":"2026-07-20T21:54:11Z","type":"stable","version":"@auth/unstorage-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/typeorm-adapter%402.11.3","date":"2026-07-20T21:54:13Z","type":"stable","version":"@auth/typeorm-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/sveltekit%401.11.3","date":"2026-07-20T21:54:00Z","type":"stable","version":"@auth/sveltekit@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/surrealdb-adapter%402.2.3","date":"2026-07-20T21:54:14Z","type":"stable","version":"@auth/surrealdb-adapter@2.2.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/supabase-adapter%401.11.3","date":"2026-07-20T21:54:16Z","type":"stable","version":"@auth/supabase-adapter@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/solid-start%400.19.3","date":"2026-07-20T21:54:02Z","type":"stable","version":"@auth/solid-start@0.19.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/sequelize-adapter%402.11.3","date":"2026-07-20T21:54:18Z","type":"stable","version":"@auth/sequelize-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/qwik%400.9.3","date":"2026-07-20T21:54:03Z","type":"stable","version":"@auth/qwik@0.9.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/prisma-adapter%402.11.3","date":"2026-07-20T21:54:19Z","type":"stable","version":"@auth/prisma-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/pouchdb-adapter%402.11.3","date":"2026-07-20T21:54:21Z","type":"stable","version":"@auth/pouchdb-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/pg-adapter%401.11.3","date":"2026-07-20T21:54:23Z","type":"stable","version":"@auth/pg-adapter@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/neon-adapter%401.11.3","date":"2026-07-20T21:54:24Z","type":"stable","version":"@auth/neon-adapter@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/neo4j-adapter%402.11.3","date":"2026-07-20T21:54:26Z","type":"stable","version":"@auth/neo4j-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/mongodb-adapter%403.11.3","date":"2026-07-20T21:54:28Z","type":"stable","version":"@auth/mongodb-adapter@3.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/mikro-orm-adapter%402.11.3","date":"2026-07-20T21:54:30Z","type":"stable","version":"@auth/mikro-orm-adapter@2.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/kysely-adapter%401.11.3","date":"2026-07-20T21:54:31Z","type":"stable","version":"@auth/kysely-adapter@1.11.3"},{"url":"https://github.com/nextauthjs/next-auth/releases/tag/%40auth/hasura-adapter%401.11.3","date":"2026-07-20T21:54:33Z","type":"stable","version":"@auth/hasura-adapter@1.11.3"}]` | `[{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.20","date":"2026-05-26T10:26:19Z","type":"stable","version":"v4.39.20"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.19","date":"2026-04-12T07:25:12Z","type":"stable","version":"v4.39.19"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.18","date":"2026-04-10T01:33:54Z","type":"stable","version":"v4.39.18"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.17","date":"2026-04-09T12:01:47Z","type":"stable","version":"v4.39.17"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.16","date":"2026-03-14T08:28:15Z","type":"stable","version":"v4.39.16"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.15","date":"2025-11-29T12:13:04Z","type":"stable","version":"v4.39.15"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.14","date":"2025-11-09T07:18:40Z","type":"stable","version":"v4.39.14"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.13","date":"2025-10-12T05:45:48Z","type":"stable","version":"v4.39.13"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.12","date":"2025-10-08T08:03:01Z","type":"stable","version":"v4.39.12"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.11","date":"2025-10-01T11:42:23Z","type":"stable","version":"v4.39.11"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.10","date":"2025-09-15T09:11:13Z","type":"stable","version":"v4.39.10"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.9","date":"2025-09-09T22:48:24Z","type":"stable","version":"v4.39.9"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.8","date":"2025-09-02T00:44:45Z","type":"stable","version":"v4.39.8"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.7","date":"2025-08-31T06:43:13Z","type":"stable","version":"v4.39.7"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.6","date":"2025-08-09T08:11:44Z","type":"stable","version":"v4.39.6"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.5","date":"2025-07-13T06:12:47Z","type":"stable","version":"v4.39.5"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.4","date":"2025-05-25T02:27:28Z","type":"stable","version":"v4.39.4"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.3","date":"2025-05-11T11:12:15Z","type":"stable","version":"v4.39.3"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.2","date":"2025-05-10T05:23:02Z","type":"stable","version":"v4.39.2"},{"url":"https://github.com/authelia/authelia/releases/tag/v4.39.1","date":"2025-03-18T03:57:41Z","type":"stable","version":"v4.39.1"}]` |
| reliability.status_page | yes | - |
| security.disclosure_policy | yes | yes |
| security.scorecard | 6 | 9.8 |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40next-auth%2Fprisma-adapter&per_page=100","last_12m":0,"max_severity":null}` | `{"count":7,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fauthelia%2Fauthelia%2Fv4&per_page=100","last_12m":3,"max_severity":"CRITICAL"}` |

## Capabilities (Auth & Identity Software)

| Capability | Auth.js (NextAuth.js) | Authelia |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Self-hosted only | Self-hosted only |
| **Methods** |  |  |
| Social login | ✓ | ✗ |
| Passwordless | - | ✓ |
| Passkeys / WebAuthn | - | ✓ |
| Multi-factor auth | - | ✓ |
| **Enterprise** |  |  |
| SAML SSO | - | ✗ |
| SCIM provisioning | - | - |
| B2B / multi-tenancy | - | - |
| **Standards** |  |  |
| OpenID Connect provider | - | ✓ |
| **Delivery** |  |  |
| Hosted UI | Headless | Hosted |
| **Access** |  |  |
| RBAC | - | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | ✓ |

*Source: Vioscale. Generated 2026-09-01T15:20:21.124Z. "-" = undocumented, not absent.*