StackTracker
Start now
WorkOS logo

WorkOS

An enterprise-readiness platform that offers hosted AuthKit login free for the first million users and sells SSO, directory sync, and audit logs as paid add-ons.

$125/mo per enterprise SSO connection (AuthKit itself free to 1M MAUs)Free tier
Visit WorkOSSee all authentication

What it actually does

WorkOS provides hosted authentication (AuthKit) plus the enterprise features that B2B buyers demand: SAML SSO, SCIM directory sync, and audit log streaming. Core AuthKit login is free for the first 1,000,000 monthly active users, so most solo projects never pay for basic auth.

The revenue is in enterprise add-ons priced per connection. Each SAML SSO connection is $125/mo and each directory sync connection is another $125/mo, with volume discounts starting at 16 connections. The intent is that you pass those charges to the enterprise customer requiring them.

Beyond auth, a custom domain is $99/mo, audit-log SIEM streaming is $125/mo per connection, and bot protection (Radar) is a separate product with 1,000 free checks before $100/mo per 50k checks.

WorkOS vs its main rivals

The tools people actually weigh against WorkOS: Clerk, Auth0, Stytch, PropelAuth. Same criteria for every column, including where WorkOS loses.

WorkOS logoWorkOSClerk logoClerkAuth0 logoAuth0SStytchPPropelAuth
Pricing & access
Free tierUnknown1M MAUUnknown50k MRUUnknown25k MAUUnknown10k MAUUnknown10k MAU
Starting price$0 + add-ons$25/mo$35/mo$0 / usage$150/mo
Custom domainYes$99/moYesProYesFreeYesYesYesYes
Enterprise
Enterprise SSO (SAML)Yes$125/connYesAdd-onYes1 freeYesYesYesYes
Directory sync (SCIM)Yes$125/connYesAdd-onYesPaidYesYesYesYes
Audit log streamingYes$125/SIEMYesLimitedYesYesUnknownVariesYesYes
OrganizationsYesFreeYes+$100/moYes5 freeYesB2B planYesCore
Login methods
Hosted login UIYesAuthKitYesYesYesUniversal LoginYesComponentsYesYes
Social loginYesFreeYesFreeYesFreeYesFreeYesFree
Bot protectionYesRadar $100YesIncludedYesAttack protectionYesIncludedUnknownBasic
Developer & data
REST API & SDKsFreeFreeFreeFreeFree
Self-hostNoNoNoNoNoNoNoNoNoNo
Worth it for
  • 1 million free MAUs, well beyond other hosted providers
  • Hosted AuthKit UI, comparable to Clerk in setup speed
  • Per-connection SSO pricing can be billed straight through to the enterprise customer who demands it
Watch out for
  • Each SSO connection is $125/mo and each directory sync is another $125/mo
  • Custom domain costs $99/mo, a feature Auth0 includes free
  • Bot protection (Radar) is a separate paid product rather than bundled in

Pay less for it

5 ways found
Free to 1M MAUs

Core AuthKit auth costs nothing until a million monthly active users, with no card required.

Bill SSO back to customers

The $125/mo per-connection charge is meant to be passed to the enterprise requiring it.

Volume discounts

Per-connection SSO drops to $100 at 16 connections and lower past that.

Skip the custom domain add-on

The $99/mo custom domain is optional; the default AuthKit domain is free.

Cheaper swap

Better Auth — If you need SSO on a budget and can self-host, its SAML plugin is free versus $125/mo per connection.

See this for your whole stack, with your real numbers

StackTracker tracks what you actually pay for WorkOS and every other tool, flags overpayment, and shows the dollars you would save by switching.

See plans

Is it the right tool for you

Pick it if
  • You want free auth at any realistic consumer scale
  • You only pay when an enterprise customer demands SSO you can bill back
  • You want hosted login without a per-user bill
Skip it if
  • You need a free custom domain and prebuilt B2C components → use Clerk
  • You want SSO without per-connection fees and can self-host → use Better Auth

Track what WorkOS and the rest of your stack cost

StackTracker adds up every subscription, plus your hours, so you see the real number.

Track my stackVisit WorkOS

Prices and limits last verified 2026-07-20.