# Ory vs Stytch

**Leader by Vioscale score:** Ory

| Attribute | Ory | Stytch |
|---|---|---|
| **Vioscale score** | 71.9 (66% (medium)) | 52.2 (71% (medium)) |
| activity.commits_last_30d | 60 | - |
| adoption.dependent_repos | 9 | - |
| adoption.github_stars | 13,848 | - |
| deployment.options | `{"cloud":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | Flexible IAM platform offering modular authentication, authorization, and user management components. Supports multiple deployment modes—managed cloud services, self-hosted open-source, or on-premise enterprise—with built-in support for modern standards including OAuth 2.0, OpenID Connect, SAML, SCIM, and device-based authentication. | Stytch offers a comprehensive authentication and identity platform designed for both B2B and B2C applications, featuring enterprise-grade authentication methods including passkeys and passwordless options, multi-tenant support, SCIM provisioning, and role-based access control. |
| features.capabilities | `{"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"cloud","saml_sso":true,"hosted_ui":"both","open_source":false,"passwordless":true,"social_login":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` |
| integrations.count | 2 | 5 |
| integrations.list | `[{"name":"Amazon SES"},{"name":"AWS API Gateway"}]` | `[{"name":"PlanetScale"},{"name":"Google"},{"name":"Microsoft"},{"name":"Okta"},{"name":"Vercel"}]` |
| language.primary | Go | - |
| license.spdx | Apache-2.0 | - |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Developer","summary":"Free tier for developers and proof of concept","contactSales":false},{"free":false,"name":"Production","summary":"$770/year plus $0.14/aDAU/month","features":["All top-tier security features","1 production environment and 3 staging environments","Permissions and machine-to-machine tokens"],"commitment":"annual","components":[{"kind":"fixed","amount":770,"period":"year","currency":"USD"},{"per":{"qty":1,"unit":"aDAU"},"kind":"metered","amount":0.14,"currency":"USD"}],"description":"Everything you need to thoroughly test and explore the landscape of identity security.","contactSales":false},{"free":false,"name":"Growth","summary":"$9,350/year","features":["Everything from Production","Advanced analytics and insights","2 production environments and 5 staging environments","B2B SSO (OIDC only)"],"commitment":"annual","components":[{"kind":"fixed","amount":9350,"period":"year","currency":"USD"}],"description":"Optimal for piloting traffic growth, getting insights into sign up and login conversions, and basic B2B features.","contactSales":false},{"free":false,"name":"Enterprise (SaaS)","summary":"Custom pricing","features":["Everything from Growth","Event firehose to data lake","Multi-region deployments with data residency","Volume pricing","Enterprise integrations for legacy systems","Multi-tenancy","Concierge onboarding","Premium support with SLAs","99.99% uptime SLA"],"description":"Managed SaaS for companies needing strict SLAs, premium support, or regulatory compliance.","contactSales":true},{"free":false,"name":"Enterprise License (Self-Hosted)","summary":"Custom pricing","features":["Full control of hosting","Multi-region deployment flexibility","Custom pricing","Premium enterprise integrations","Premium support with SLAs"],"description":"Self-hosted option for maximum control and in-house expertise.","contactSales":true}],"summary":"From $770/year. Free Developer tier. Usage-based (aDAU) metered pricing available.","currency":"USD","freeTier":true,"sourceUrl":"https://www.ory.sh","retrievedAt":"2026-08-05T14:11:20.676Z","startingPrice":{"amount":0.14,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` | `{"type":"usage","plans":[{"free":true,"name":"Free","summary":"Free for 10,000 MAU","features":["OAuth, SSO, Sessions, and RBAC","Organization-level primary and secondary auth policies","Built-in multi-tenancy","SCIM provisioning and deprovisioning with automatic role management","JIT provisioning controls","Pre-built UI components for login and admin portal"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"Always free with 10,000 monthly active users and AI agents","contactSales":false,"includedLimits":{"m2m_tokens":"1,000","fingerprints":"10,000","monthly_active_users":"10,000","sso_scim_connections":"5"}},{"free":false,"name":"Pay-as-you-go","summary":"Usage-based pricing beyond free tier","features":["Full suite of authentication and authorization features","Unlimited organizations","Advanced fraud and risk prevention (optional)","Email customization and brand removal (optional)"],"components":[{"kind":"per_unit","unit":"additional_sso_scim_connection","amount":125,"period":"month","currency":"USD"},{"per":{"qty":1,"unit":"fingerprint"},"kind":"metered","amount":0.005,"currency":"USD"}],"description":"Pay for usage beyond free tier","contactSales":false},{"free":false,"name":"Enterprise","summary":"Custom pricing – contact sales","features":["Custom discounted rates","Private support Slack channel","99.99% uptime SLA","HIPAA/BAA compliance","Migration support","Advanced fraud protection"],"description":"Custom pricing with dedicated support","contactSales":true}],"addOns":[{"name":"Email customization and Stytch brand removal","components":[{"kind":"one_time","amount":99,"currency":"USD"}]}],"summary":"Free tier with 10,000 MAU. Pay-as-you-go for additional usage. Enterprise plans available.","currency":"USD","freeTier":true,"sourceUrl":"https://stytch.com","retrievedAt":"2026-08-03T22:34:28.047Z","startingPrice":{"amount":0.005,"period":"month","currency":"USD"},"billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | freemium | commercial |
| pricing.price_level | unknown | low |
| pricing.transparent | yes | yes |
| release.cadence_days | 66 | - |
| release.history | `[{"url":"https://github.com/ory/kratos/releases/tag/v26.2.0","date":"2026-03-20T14:10:32Z","type":"stable","version":"v26.2.0"},{"url":"https://github.com/ory/kratos/releases/tag/v25.4.0","date":"2025-11-07T15:48:50Z","type":"stable","version":"v25.4.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.3.1","date":"2024-10-28T10:21:42Z","type":"stable","version":"v1.3.1"},{"url":"https://github.com/ory/kratos/releases/tag/v1.3.0","date":"2024-09-26T10:33:37Z","type":"stable","version":"v1.3.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.2.0","date":"2024-06-05T11:02:56Z","type":"stable","version":"v1.2.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.1.0","date":"2024-02-20T12:26:07Z","type":"stable","version":"v1.1.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.0.0","date":"2023-07-12T20:24:48Z","type":"stable","version":"v1.0.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.13.0","date":"2023-04-18T17:07:18Z","type":"stable","version":"v0.13.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.11.1","date":"2023-01-14T11:40:30Z","type":"stable","version":"v0.11.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.11.0","date":"2022-12-02T18:41:38Z","type":"stable","version":"v0.11.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.10.1","date":"2022-06-01T11:15:28Z","type":"stable","version":"v0.10.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.10.0","date":"2022-05-30T13:09:17Z","type":"stable","version":"v0.10.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.3","date":"2022-03-25T10:02:51Z","type":"prerelease","version":"v0.9.0-alpha.3"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.2","date":"2022-03-22T10:20:26Z","type":"prerelease","version":"v0.9.0-alpha.2"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.1","date":"2022-03-21T22:20:48Z","type":"prerelease","version":"v0.9.0-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.2-alpha.1","date":"2021-12-17T15:04:04Z","type":"prerelease","version":"v0.8.2-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.1-alpha.1","date":"2021-12-13T18:59:53Z","type":"prerelease","version":"v0.8.1-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.3","date":"2021-10-28T22:56:46Z","type":"prerelease","version":"v0.8.0-alpha.3"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.2","date":"2021-10-28T10:03:55Z","type":"prerelease","version":"v0.8.0-alpha.2"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.1","date":"2021-10-28T08:23:21Z","type":"prerelease","version":"v0.8.0-alpha.1"}]` | - |
| reliability.sla_pct | 99.99 | 99.99 |
| reliability.status_page | yes | yes |
| security.disclosure_policy | yes | - |
| security.gdpr | yes | - |
| security.hipaa | - | yes |
| security.iso27001 | yes | - |
| security.pci | yes | - |
| security.scorecard | 6.7 | - |
| security.soc2 | yes | - |
| security.vulnerabilities | `{"count":2,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fory%2Fkratos&per_page=100","last_12m":1,"max_severity":"HIGH"}` | - |

## Capabilities (Auth & Identity Software)

| Capability | Ory | Stytch |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud only |
| **Methods** |  |  |
| Social login | - | ✓ |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | ✓ | ✓ |
| Multi-factor auth | - | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✓ | ✓ |
| SCIM provisioning | ✓ | ✓ |
| B2B / multi-tenancy | ✓ | ✓ |
| **Standards** |  |  |
| OpenID Connect provider | ✓ | ✓ |
| **Delivery** |  |  |
| Hosted UI | Both | Both |
| **Access** |  |  |
| RBAC | ✓ | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | ✗ |

*Source: Vioscale. Generated 2026-09-01T16:44:33.408Z. "-" = undocumented, not absent.*