Curity Identity Server vs Stytch
Curity Identity Server
curity.ioStytch
stytch.comSide by side
| Figure | Curity Identity Server | Stytch |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 4 | 2 |
| Spec score · Customer Identity and Access Management Software | 8.4 (#9) | 7.5 (#16) |
| Spec score · API authentication platforms | 8.2 (#4) | 7.4 (#11) |
| Spec score · OAuth Server Software | 8.2 (#14) | 7.4 (#29) |
| Authentication | It supports passkeys, MFA, national eIDs, native mobile authentication, and CIBA. | The platform offers passkeys, passwords, SAML and OIDC single sign-on, multifactor authentication, and one-time passcodes. |
| Compliance | Curity states that it is SOC 2 Type 2 and ISO 27001 certified. | Stytch announced SOC 2 Type II certification and ISO/IEC 27001 certification, and says compliance reports are available by request to support. |
| Founded | 2015 | 2020 |
| Support | The pricing page lists Slack support, business-hours helpdesk support, and 24/7 support options across plans; the Community Edition FAQ directs users to Stack Overflow for community support. | The Enterprise plan lists an enterprise support SLA, private support Slack channel, and migration support. |
Plans
Curity Identity Server
- CommunityFree
- EnterprisePrice not published
- StandardPrice not published
- Token HandlerPriced on request
In their own words
Curity Identity Server
Curity Identity Server is a standards-based platform for securing users, APIs, machines and AI agents. It combines authentication, federation, token services, API access control and user management. Authentication options include passkeys, MFA, national eIDs, native mobile authentication and CIBA; token capabilities include Token Designer, Token Exchange, Ephemeral Clients, Sender-Constrained Tokens, Phantom Tokens and Split Token patterns. The platform is built on OAuth 2.0, OpenID Connect, FAPI, SAML and SCIM, and Curity says it is certified by the OpenID Foundation. Its User Management Service lists connections to directory services and databases including Active Directory, LDAP, Amazon RDS, DynamoDB, Azure SQL, MongoDB, MySQL, Oracle and PostgreSQL. It can run on-premises or in the cloud, using Docker images or Kubernetes Helm charts. Configuration options include a web Admin UI, CLI, RESTCONF API, XML files, GraphQL and a DevOps Dashboard. The Community plan costs nothing and supports unlimited users with username/password and social identity providers. A 14-day trial is listed. Curity was founded in 2015 and is headquartered in Stockholm, Sweden.
Stytch
Stytch is an identity platform for applications used by people and AI agents. It combines authentication, authorization and security services, with support for Android, iOS, web and API implementations. Authentication methods include passkeys, passwords, SAML and OIDC single sign-on, multifactor authentication and one-time passcodes. Business features cover multi-tenant organizations, role-based access control, SCIM, just-in-time provisioning and an embeddable administration portal. Connected Apps can let an application provide OAuth 2.0 and OIDC identity services for integrations, agents and cross-application data sharing. Fraud controls include bot detection, device fingerprinting, invisible CAPTCHA, security verdicts and intelligent rate limiting. Developers can select prebuilt interfaces, headless frontend SDKs, or backend APIs and SDKs. The free Pay as you go plan costs nothing and includes 10,000 monthly active users and AI agents, unlimited organizations, five SSO or SCIM connections and 1,000 M2M tokens. Enterprise pricing is custom.