Duo Auth API vs SuperTokens

Duo Auth API has no write-up on Specifiction yet; its figures are above.

SuperTokens is an open-source authentication provider for developers adding sign-in and session management to applications. It supports email and password, passwordless email or SMS codes, magic links, social login, and passkeys. Enterprise options include tenant-specific login methods, separate user pools, and enterprise SSO. Developers can adapt the prebuilt interface and add logic before or after API operations with hooks and overrides. Backend SDKs communicate with SuperTokens Core; frontend SDKs call authentication routes exposed by the application backend. Core can be self-hosted, with open-source features free at any scale and no MAU limit. A managed Cloud plan is also available, free under 5K MAUs and then $0.02 per MAU. Other paid or sales-led features include multi-tenancy, cross-domain unified login, machine-to-machine authentication, availability zones with uptime SLAs, and Attack Protection Suite. That suite can detect risky authentication activity and prompt extra verification or block attempts. Integrations include Next.js, NestJS, GraphQL, Capacitor, AWS Lambda, Vercel, Hasura, and Supabase. SuperTokens says it is SOC 2 compliant and describes more than 100 controls and tests.