authentik vs Logto
authentik
goauthentik.ioLogto
logto.ioSide by side
| Figure | authentik | Logto |
|---|---|---|
| Price from | $5/mo | $24/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 6 |
| Spec score · Authentication Software | 8.6 (#4) | 8.2 (#15) |
| Spec score · Passkey Authentication Software | 8.7 (#8) | 8.2 (#18) |
| Spec score · OAuth Server Software | 8.5 (#9) | 8.1 (#16) |
| Authentication | It supports multi-factor authentication with TOTP and WebAuthn/passkeys, including hardware or software authenticators. | Its sign-in features include passwords, email or SMS one-time codes, social sign-in, passkeys, multi-factor authentication, and enterprise SSO. |
| Intended users | The Open Source plan is described as being for homelab users and simple use cases, while Enterprise Plus is described as being for custom contracts and expert support. | Logto describes its IAM product as designed for modern apps and SaaS products and lists consumer apps, SaaS products, and enterprises among its use cases. |
| Support | The open-source plan lists community Discord and no support; paid support is offered as part of enterprise software subscriptions, with ticket support for Enterprise subscriptions over $1k. | Self-hosted OSS Community support is through GitHub and Discord; Self-hosted Pro lists email support within 3 business days. |
Plans
authentik
- FreeFree
- Enterprise$5 a month
- Open SourceFree
- Enterprise Plus$20,000 a year
Logto
- OSS CommunityFree
- Pro$24 a month
- Self-hosted Pro$199 a month
- EnterprisePriced on request
- FreePrice not published
- Self-hosted EnterprisePriced on request
In their own words
authentik
authentik is an open-source, self-hostable identity and access management product for workforce single sign-on, customer identity, zero-trust security, legacy application integration and API security. It supports OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM and Kerberos, as well as WS-Federation. MFA options include TOTP, WebAuthn/passkeys, email, SMS, Duo and static tokens. Access policies can consider factors such as user attributes, time and location. Security features include audit logging, session binding, GeoIP and impossible-travel detection, and client certificate authentication with mTLS. It can run on customer infrastructure, including Docker and Kubernetes; the pricing FAQ says there is no hosted version currently. The authentik Agent integrates with Windows, macOS and Linux for local device login and CLI authentication. A free open-source plan includes community Discord support but no product support. Enterprise costs $5 a month, billed annually, at $5 per user per month; external users are $0.02 per month and service accounts have no cost.
Logto
Logto is a freemium identity and access-management solution for modern applications and SaaS products. It handles authentication through passwords, email or SMS one-time codes, social sign-in, passkeys, multifactor authentication and enterprise single sign-on. Authorization features include role-based access control and organizations for multi-tenant applications. Developers get a web Console, Management API, Experience API, Account API, SDKs and an MCP Server. Quick starts cover Android, iOS, Chrome extensions, React, Next.js, Vue, Flutter, Go,.NET, Python, PHP and WordPress. Listed connectors include Apple, Microsoft, Discord, Facebook, GitHub, GitLab, Google, LinkedIn, Slack and X. Security features include signing-key rotation, OIDC back-channel logout, CSRF protections and DoS protections. Logto states that it is SOC 2 Type II certified, with cloud regions in the EU, Australia, US and Japan. Cloud Free allows up to 50,000 monthly active users and includes 50K tokens; Pro costs $24 a month with 50K tokens included and extra usage billed. Self-hosted options include free OSS Community and Self-hosted Pro at $199 a month, billed annually.