# SuperTokens vs WorkOS

**Leader by Vioscale score:** WorkOS

| Attribute | SuperTokens | WorkOS |
|---|---|---|
| **Vioscale score** | 57.8 (69% (medium)) | 71.6 (72% (medium)) |
| activity.commits_last_30d | 100 | - |
| adoption.dependent_repos | 0 | - |
| adoption.github_stars | 15,282 | - |
| deployment.options | `{"cloud":true,"hybrid":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | SuperTokens is an authentication infrastructure provider offering both open-source self-hosted deployment and managed cloud services. It provides ready-to-use authentication features including email/password, social login, passwordless methods, multi-factor authentication, and role-based access control. | A developer-focused authentication platform that provides single sign-on, SCIM user provisioning, role-based access control, and multi-factor authentication for SaaS applications. Designed to help companies quickly support enterprise security requirements without extensive in-house implementation. |
| features.capabilities | `{"mfa":true,"rbac":true,"hosting":"both","saml_sso":true,"hosted_ui":"both","open_source":true,"passwordless":true,"social_login":true,"b2b_multi_tenant":true}` | `{"mfa":true,"oidc":true,"rbac":true,"hosting":"cloud","saml_sso":true,"hosted_ui":"both","passwordless":true,"social_login":true,"b2b_multi_tenant":true,"scim_provisioning":true}` |
| integrations.count | 7 | 12 |
| integrations.list | `[{"name":"Google"},{"name":"GitHub"},{"name":"Facebook"},{"name":"Slack"},{"name":"Microsoft Teams"},{"name":"Email"},{"name":"SMS providers"}]` | `[{"name":"LinkedIn"},{"name":"Slack"},{"name":"GitLab"},{"name":"Bitbucket"},{"name":"Xero"},{"name":"Rippling"},{"name":"ADP"},{"name":"Intuit"},{"name":"Google"},{"name":"GitHub"},{"name":"Microsoft"},{"name":"Apple"}]` |
| language.primary | Java | - |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"cli":true,"ios":true,"web":true,"android":true}` | `{"ios":true,"web":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Cloud Managed","summary":"Free under 5K MAU, then $0.02/MAU","features":["Email/password authentication","Social login (Google, GitHub, Facebook, custom providers)","Passwordless login (magic links, SMS/Email OTP)","Session management","User management dashboard","Sign up/Sign in UI","Email verification & password recovery","SOC2 compliance","Community support"],"commitment":"monthly","components":[{"per":{"qty":1,"unit":"MAU"},"kind":"metered","amount":0.02,"currency":"USD"}],"description":"Hosted authentication service with usage-based pricing","contactSales":false,"includedLimits":{"mau":"5000/mo"}},{"free":true,"name":"Self-Hosted Open Source","summary":"Free, unlimited usage","features":["Email/password authentication","Social login (Google, GitHub, Facebook, custom providers)","Passwordless login (magic links, SMS/Email OTP)","Session management","RBAC","User management dashboard","Sign up/Sign in UI","Email verification & password recovery","Community support"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"Self-hosted open source deployment with no usage limits","contactSales":false}],"addOns":[{"name":"Multi-factor Authentication","components":[{"per":{"qty":1,"unit":"MAU"},"kind":"metered","amount":0.01,"currency":"USD"}]},{"name":"Account Linking","components":[{"per":{"qty":1,"unit":"MAU"},"kind":"metered","amount":0.005,"currency":"USD"}]},{"name":"Dashboard Users","components":[{"kind":"per_unit","unit":"user","amount":20,"period":"month","currency":"USD"}]},{"name":"Multi-tenancy and Organizational Support"},{"name":"Machine-to-Machine Authentication"},{"name":"Multiple Availability Zones & SLA"},{"name":"Attack Protection Suite"},{"name":"Implementation Assistance"}],"summary":"Free self-hosted or free tier for cloud under 5K MAU, then $0.02/MAU for cloud. Add-ons from $0.005-$0.01/MAU plus dashboard users at $20/user/mo.","currency":"USD","freeTier":true,"sourceUrl":"https://supertokens.com/pricing","retrievedAt":"2026-08-14T15:28:06.660Z","billingPeriods":["month"]}` | `{"type":"subscription","plans":[{"free":true,"name":"Free","summary":"Free up to 1,000,000 MAUs/month","features":["Single Sign-On (SAML & OIDC)","SCIM provisioning","Role-based access control","Bot detection","Identity linking","Multi-factor authentication","Social authentication (Microsoft, Google, Apple, GitHub, LinkedIn, Slack, GitLab, Bitbucket, Xero, Rippling, ADP, Intuit)","Magic Auth (passwordless email codes)","Audit logs","Agent authentication"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"Up to 1 million monthly active users with core features included","contactSales":false,"includedLimits":{"maus":"1,000,000/month","admins":"unlimited","organizations":"unlimited"}}],"addOns":[{"name":"Overage Monthly Active Users","components":[{"kind":"fixed","amount":2500,"period":"month","currency":"USD"}]},{"name":"SSO Connections per Organization","components":[{"kind":"fixed","amount":125,"period":"month","currency":"USD"}]},{"name":"Custom Domain","components":[{"kind":"fixed","amount":99,"period":"month","currency":"USD"}]}],"summary":"Free up to 1,000,000 MAUs. $2,500/month per additional million MAUs. $125/month per SSO-enabled organization.","currency":"USD","freeTier":true,"sourceUrl":"https://workos.com/blog/auth0-pricing-how-it-works-and-compares-to-workos","retrievedAt":"2026-08-14T08:35:19.116Z","billingPeriods":["month"]}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | freemium |
| pricing.price_level | low | low |
| pricing.transparent | yes | yes |
| release.history | `[{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v12.1.1","date":"2026-08-13T09:16:15Z","type":"stable","version":"v12.1.1"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v12.1.0","date":"2026-08-12T12:48:01Z","type":"stable","version":"v12.1.0"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v12.0.10","date":"2026-08-06T10:40:04Z","type":"stable","version":"v12.0.10"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.4.7","date":"2026-08-06T04:24:19Z","type":"stable","version":"v11.4.7"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.3.7","date":"2026-08-06T03:46:51Z","type":"stable","version":"v11.3.7"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v12.0.9","date":"2026-08-03T13:21:44Z","type":"stable","version":"v12.0.9"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.4.6","date":"2026-07-31T05:43:55Z","type":"stable","version":"v11.4.6"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.3.6","date":"2026-07-30T21:43:04Z","type":"stable","version":"v11.3.6"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.2.3","date":"2026-07-30T20:10:05Z","type":"stable","version":"v11.2.3"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.1.3","date":"2026-07-30T19:10:37Z","type":"stable","version":"v11.1.3"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v11.0.8","date":"2026-07-30T18:43:59Z","type":"stable","version":"v11.0.8"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v10.1.8","date":"2026-07-30T16:20:48Z","type":"stable","version":"v10.1.8"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v10.0.7","date":"2026-07-30T16:03:00Z","type":"stable","version":"v10.0.7"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v9.3.4","date":"2026-07-30T15:36:19Z","type":"stable","version":"v9.3.4"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v9.2.6","date":"2026-07-30T15:17:51Z","type":"stable","version":"v9.2.6"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v9.1.5","date":"2026-07-30T15:03:03Z","type":"stable","version":"v9.1.5"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v9.0.5","date":"2026-07-30T14:45:41Z","type":"stable","version":"v9.0.5"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v8.0.6","date":"2026-07-30T14:07:52Z","type":"stable","version":"v8.0.6"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v7.0.22","date":"2026-07-30T11:52:12Z","type":"stable","version":"v7.0.22"},{"url":"https://github.com/supertokens/supertokens-core/releases/tag/v6.0.23","date":"2026-07-30T14:27:28Z","type":"stable","version":"v6.0.23"}]` | - |
| reliability.sla_pct | 99.99 | 99.99 |
| reliability.status_page | yes | yes |
| security.disclosure_policy | - | yes |
| security.gdpr | yes | yes |
| security.hipaa | - | yes |
| security.scorecard | 4.4 | - |
| security.soc2 | yes | yes |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fsupertokens%2Fsupertokens-core&per_page=100","last_12m":0,"max_severity":null}` | - |

## Capabilities (Auth & Identity Software)

| Capability | SuperTokens | WorkOS |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud only |
| **Methods** |  |  |
| Social login | ✓ | ✓ |
| Passwordless | ✓ | ✓ |
| Passkeys / WebAuthn | - | - |
| Multi-factor auth | ✓ | ✓ |
| **Enterprise** |  |  |
| SAML SSO | ✓ | ✓ |
| SCIM provisioning | - | ✓ |
| B2B / multi-tenancy | ✓ | ✓ |
| **Standards** |  |  |
| OpenID Connect provider | - | ✓ |
| **Delivery** |  |  |
| Hosted UI | Both | Both |
| **Access** |  |  |
| RBAC | ✓ | ✓ |
| **Licensing** |  |  |
| Self-hostable OSS core | ✓ | - |

*Source: Vioscale. Generated 2026-09-01T16:30:16.235Z. "-" = undocumented, not absent.*