# Ory vs TrueCaaS

**Leader by Vioscale AI score:** Ory

| Attribute | Ory | TrueCaaS |
|---|---|---|
| **Vioscale AI score** | 70.7 (66% (medium)) | 53.5 (18% (low)) |
| activity.commits_last_30d | 60 | - |
| adoption.dependent_repos | 9 | - |
| adoption.github_stars | 13,848 | - |
| deployment.options | `{"cloud":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | Flexible IAM platform offering modular authentication, authorization, and user management components. Supports multiple deployment modes—managed cloud services, self-hosted open-source, or on-premise enterprise—with built-in support for modern standards including OAuth 2.0, OpenID Connect, SAML, SCIM, and device-based authentication. | TrueCaaS is a multi-tenant identity and authorization control plane for SaaS applications, enterprise applications, APIs, and AI agents. It provides authentication, enterprise federation, application-level roles and privileges, runtime authorization and entitlement decisions, machine and agent identities, governance, and audit trails through a centralized platform.

TrueCaaS complements existing identity providers such as Microsoft Entra ID, Okta, and enterprise directories rather than requiring organizations to replace them. Applications can authenticate users through TrueCaaS and make real-time authorization decisions based on the tenant, application, identity, requested action, privileges, and surrounding context.

Built around a Tenant → Environment → Application architecture, TrueCaaS is designed for organizations building multi-tenant SaaS platforms, customer and partner applications, enterprise applications, APIs, and agentic systems that need consistent identity and authorization without rebuilding those capabilities inside every application. |
| features.capabilities | `{"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"b2b_multi_tenant":true,"passkeys_webauthn":true,"scim_provisioning":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"hosted","passwordless":true,"b2b_multi_tenant":true,"passkeys_webauthn":true}` |
| integrations.count | 2 | 5 |
| integrations.list | `[{"name":"Amazon SES"},{"name":"AWS API Gateway"}]` | `[{"name":"Active Directory","native":true,"category":"federation","direction":"bidirectional"},{"name":"LDAP","native":true,"category":"federation","direction":"bidirectional"},{"name":"SAML","native":true,"category":"federation","direction":"bidirectional"},{"name":"OIDC","native":true,"category":"federation","direction":"bidirectional"},{"name":"Webhooks","native":true,"direction":"outbound"}]` |
| language.primary | Go | - |
| license.spdx | Apache-2.0 | - |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| media.logo | - | https://www.truecaas.io/_next/image?url=%2Ftruecaas-logo-tb.png&w=1920&q=75 |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Developer","summary":"Free tier for developers and proof of concept","contactSales":false},{"free":false,"name":"Production","summary":"$770/year plus $0.14/aDAU/month","features":["All top-tier security features","1 production environment and 3 staging environments","Permissions and machine-to-machine tokens"],"commitment":"annual","components":[{"kind":"fixed","amount":770,"period":"year","currency":"USD"},{"per":{"qty":1,"unit":"aDAU"},"kind":"metered","amount":0.14,"currency":"USD"}],"description":"Everything you need to thoroughly test and explore the landscape of identity security.","contactSales":false},{"free":false,"name":"Growth","summary":"$9,350/year","features":["Everything from Production","Advanced analytics and insights","2 production environments and 5 staging environments","B2B SSO (OIDC only)"],"commitment":"annual","components":[{"kind":"fixed","amount":9350,"period":"year","currency":"USD"}],"description":"Optimal for piloting traffic growth, getting insights into sign up and login conversions, and basic B2B features.","contactSales":false},{"free":false,"name":"Enterprise (SaaS)","summary":"Custom pricing","features":["Everything from Growth","Event firehose to data lake","Multi-region deployments with data residency","Volume pricing","Enterprise integrations for legacy systems","Multi-tenancy","Concierge onboarding","Premium support with SLAs","99.99% uptime SLA"],"description":"Managed SaaS for companies needing strict SLAs, premium support, or regulatory compliance.","contactSales":true},{"free":false,"name":"Enterprise License (Self-Hosted)","summary":"Custom pricing","features":["Full control of hosting","Multi-region deployment flexibility","Custom pricing","Premium enterprise integrations","Premium support with SLAs"],"description":"Self-hosted option for maximum control and in-house expertise.","contactSales":true}],"summary":"From $770/year. Free Developer tier. Usage-based (aDAU) metered pricing available.","currency":"USD","freeTier":true,"sourceUrl":"https://www.ory.sh","retrievedAt":"2026-08-05T14:11:20.676Z","startingPrice":{"amount":0.14,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` | `{"type":"subscription","plans":[{"free":false,"name":"Developer","summary":"$29/month","features":["Hosted login + redirect flow","Passkeys + MFA","Starter RBAC for one app"],"commitment":"monthly","components":[{"kind":"fixed","amount":29,"period":"month","currency":"USD"}],"description":"For developers validating TrueCaaS in a real tenant app before production rollout","contactSales":false,"includedLimits":{"audit_logs":"7 days","support_tickets":"2/month","included_end_users":"1","mfa_requests_per_minute":"30","oidc_requests_per_minute":"120","source_ip_requests_per_minute":"3600"}},{"free":false,"name":"Starter","summary":"$99/month","features":["Hosted login","OIDC / OAuth2","Passkeys","TOTP MFA","Email MFA","RBAC","REST API","Webhooks"],"commitment":"monthly","components":[{"kind":"fixed","amount":99,"period":"month","currency":"USD"}],"description":"Start fast with hosted login, MFA, and app RBAC for your first production customer app","contactSales":false,"includedLimits":{"audit_logs":"30 days","support_tickets":"10/month","included_end_users":"3000","mfa_requests_per_minute":"180","oidc_requests_per_minute":"300","mcp_access_checks_per_min":"60"}},{"free":false,"name":"Growth","summary":"$349/month (Most popular)","features":["Hosted login","OIDC / OAuth2","Passkeys","TOTP MFA","Email MFA","SMS MFA","RBAC","REST API","Webhooks","MCP API","IRP API","Managed tenants","Audit export","Custom domain","Priority support"],"commitment":"monthly","components":[{"kind":"fixed","amount":349,"period":"month","currency":"USD"}],"description":"For production products with real growth and automation needs","contactSales":false,"includedLimits":{"audit_logs":"30 days","support_tickets":"10/month","included_end_users":"9000","mfa_requests_per_minute":"180","oidc_requests_per_minute":"300","mcp_access_checks_per_min":"360","oidc_client_requests_per_minute":"10000"}},{"free":false,"name":"Scale","summary":"$899/month","features":["Hosted login","OIDC / OAuth2","Passkeys","TOTP MFA","Email MFA","SMS MFA","RBAC","REST API","Webhooks","MCP API","IRP API","Managed tenants","Audit export","Custom domain","Priority support","BYOK Enabled","Display Logo","Feature Tracking","Governed Actions","Migration Supported"],"commitment":"monthly","components":[{"kind":"fixed","amount":899,"period":"month","currency":"USD"}],"description":"For public-facing platforms with large user populations","contactSales":false,"includedLimits":{"audit_logs":"90 days","support_tickets":"25/month","included_end_users":"9000","mfa_requests_per_minute":"600","oidc_requests_per_minute":"900","mcp_access_checks_per_min":"360","source_ip_requests_per_minute":"3600","oidc_client_requests_per_minute":"10000"}},{"free":false,"name":"Growth Yearly","summary":"$3,560/year","commitment":"annual","components":[{"kind":"fixed","amount":3560,"period":"year","currency":"USD"}],"contactSales":false},{"free":false,"name":"Scale Yearly","summary":"$9,170/year","commitment":"annual","components":[{"kind":"fixed","amount":9170,"period":"year","currency":"USD"}],"contactSales":false}],"summary":"From $29/month. SaaS, Licensed, and Managed deployment models available.","currency":"USD","freeTier":false,"sourceUrl":"https://www.truecaas.io/pricing","retrievedAt":"2026-09-06T14:17:12.316Z","startingPrice":{"amount":29,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` |
| pricing.free_tier | yes | no |
| pricing.model | freemium | commercial |
| pricing.price_level | unknown | mid |
| pricing.starting_price | - | `{"amount":29,"currency":"USD"}` |
| pricing.transparent | yes | yes |
| release.cadence_days | 66 | - |
| release.history | `[{"url":"https://github.com/ory/kratos/releases/tag/v26.2.0","date":"2026-03-20T14:10:32Z","type":"stable","version":"v26.2.0"},{"url":"https://github.com/ory/kratos/releases/tag/v25.4.0","date":"2025-11-07T15:48:50Z","type":"stable","version":"v25.4.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.3.1","date":"2024-10-28T10:21:42Z","type":"stable","version":"v1.3.1"},{"url":"https://github.com/ory/kratos/releases/tag/v1.3.0","date":"2024-09-26T10:33:37Z","type":"stable","version":"v1.3.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.2.0","date":"2024-06-05T11:02:56Z","type":"stable","version":"v1.2.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.1.0","date":"2024-02-20T12:26:07Z","type":"stable","version":"v1.1.0"},{"url":"https://github.com/ory/kratos/releases/tag/v1.0.0","date":"2023-07-12T20:24:48Z","type":"stable","version":"v1.0.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.13.0","date":"2023-04-18T17:07:18Z","type":"stable","version":"v0.13.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.11.1","date":"2023-01-14T11:40:30Z","type":"stable","version":"v0.11.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.11.0","date":"2022-12-02T18:41:38Z","type":"stable","version":"v0.11.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.10.1","date":"2022-06-01T11:15:28Z","type":"stable","version":"v0.10.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.10.0","date":"2022-05-30T13:09:17Z","type":"stable","version":"v0.10.0"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.3","date":"2022-03-25T10:02:51Z","type":"prerelease","version":"v0.9.0-alpha.3"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.2","date":"2022-03-22T10:20:26Z","type":"prerelease","version":"v0.9.0-alpha.2"},{"url":"https://github.com/ory/kratos/releases/tag/v0.9.0-alpha.1","date":"2022-03-21T22:20:48Z","type":"prerelease","version":"v0.9.0-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.2-alpha.1","date":"2021-12-17T15:04:04Z","type":"prerelease","version":"v0.8.2-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.1-alpha.1","date":"2021-12-13T18:59:53Z","type":"prerelease","version":"v0.8.1-alpha.1"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.3","date":"2021-10-28T22:56:46Z","type":"prerelease","version":"v0.8.0-alpha.3"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.2","date":"2021-10-28T10:03:55Z","type":"prerelease","version":"v0.8.0-alpha.2"},{"url":"https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.1","date":"2021-10-28T08:23:21Z","type":"prerelease","version":"v0.8.0-alpha.1"}]` | - |
| reliability.sla_pct | 99.99 | - |
| reliability.status_page | yes | - |
| security.disclosure_policy | yes | - |
| security.gdpr | yes | yes |
| security.iso27001 | yes | - |
| security.pci | yes | - |
| security.scorecard | 6.7 | - |
| security.soc2 | yes | - |
| security.trust_center | - | https://www.truecaas.io/security |
| security.vulnerabilities | `{"count":2,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fory%2Fkratos&per_page=100","last_12m":1,"max_severity":"HIGH"}` | - |

## Capabilities (Auth & Identity Software)

| Capability | Ory | TrueCaaS |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud + self-hosted |
| **Methods** |  |  |
| Social login | - | - |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | ✓ | ✓ |
| Multi-factor auth | - | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✓ | ✓ |
| SCIM provisioning | ✓ | - |
| B2B / multi-tenancy | ✓ | ✓ |
| **Standards** |  |  |
| OpenID Connect provider | ✓ | ✓ |
| **Delivery** |  |  |
| Hosted UI | Both | Hosted |
| **Access** |  |  |
| RBAC | ✓ | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | - |

*Source: Vioscale AI. Generated 2026-09-06T18:39:29.846Z. "-" = undocumented, not absent.*