# Free auth tiers compared: WorkOS, Kinde, Stytch and Descope

Two auth platforms went public on Perq today: WorkOS AuthKit and Kinde. That makes four auth vendors with a free plan you can start on without applying to anything. The main difference between them is how many monthly active users (MAU) you get before you have to pay, and what else the free plan includes. We checked each figure on the vendor's pricing page.


- [WorkOS](https://perq.sh/offers/workos-authkit-free) (AuthKit user management free up to 1 million monthly active users)
- [Kinde](https://perq.sh/offers/kinde-free) (Free plan: 10,500 monthly active users)
- [Stytch](https://perq.sh/offers/stytch-free) (Free: 10,000 monthly active users and AI agents)
- [Descope](https://perq.sh/offers/descope-free) (Free Forever plan: 7,500 monthly active users, 3 SSO connections, 10,000 M2M exchanges)


## MAU limits side by side

- **WorkOS AuthKit:** free up to 1 million monthly active users, by far the highest cap here. Social auth, MFA and RBAC are included. Enterprise SSO connections, custom domains and log streaming are billed separately.
- **Kinde:** 10,500 monthly active users on the Free plan, with email, SMS and social login, MFA, B2B organizations and a custom domain. No credit card required.
- **Stytch:** 10,000 monthly active users and AI agents, plus 5 SSO or SCIM connections and 1,000 M2M tokens.
- **Descope:** 7,500 MAUs on Free Forever, with 3 SSO connections and 10,000 M2M exchanges. There are no overages: you upgrade to go past the limits.

## Which one to start with

- **Expecting lots of consumer sign-ups:** WorkOS's 1 million MAU cap leaves the most headroom, as long as you don't need the add-ons it bills separately.
- **B2B apps that need SSO early:** Stytch and Descope include SSO connections on the free plan (5 and 3). WorkOS bills enterprise SSO connections separately.
- **Agents and machine-to-machine auth:** Stytch counts AI agents in its free allowance, and both Stytch and Descope include M2M tokens or exchanges.
- **Want a custom domain without paying:** Kinde's Free plan includes one.

If you are a funded startup, two application programs are worth a look too: Auth0 offers one year free to eligible startups, and Clerk has a startup discount for teams up to 1 year after launch.


- [Auth0](https://perq.sh/offers/auth0-startups) (One year of Auth0 free)
- [Clerk](https://perq.sh/offers/clerk-startups) (Startup discount (amount on application))


[Auth secrets pack](https://perq.sh/packs/auth-secrets-pack)

## Also public today

Seven more offers came out of embargo today. Subscribers got them yesterday. They cover databases, an AI gateway, scraping, webhooks, notifications, real-time analytics, and a credits program for agent platforms:


- [Aiven](https://perq.sh/offers/aiven-free) (Free plans for PostgreSQL, Valkey, Kafka and OpenSearch (1 CPU, 1 GB RAM, 1 GB storage))
- [Portkey](https://perq.sh/offers/portkey-free) (Developer plan free forever: 10k recorded logs per month)
- [ScraperAPI](https://perq.sh/offers/scraperapi-trial) (7-day trial with 5,000 API credits)
- [Svix](https://perq.sh/offers/svix-free) (Free plan: up to 50k webhook messages per month)
- [Novu](https://perq.sh/offers/novu-free) (Free plan: 10,000 workflow runs / month)
- [Tinybird](https://perq.sh/offers/tinybird-free) (Free plan: 10 GB storage, 1k requests per day)
- [Neon](https://perq.sh/offers/neon-agent-plan) (Up to $25,000 in paid-tier credits plus sponsored free-tier infrastructure (Agent Plan))


Neon's Agent Plan is the only one that needs an application. It is for platforms that provision databases for their users. The others are free plans or trials you can start right away.

Want new offers a day before they show up on the site? [Join early access](https://perq.sh/newsletter).

---

*Originally published on [Perq](https://perq.sh/blog/free-auth-tiers-compared), where every listing carries a source link and a last-verified date. Perq is run by Avatar 8 LLC.*