FusionAuth vs SuperTokens
FusionAuth
fusionauth.ioSuperTokens
supertokens.comSide by side
| Figure | FusionAuth | SuperTokens |
|---|---|---|
| Price from | $162/mo | $0.01/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 8 | 6 |
| Spec score · Multi-Factor Authentication APIs | 9.3 (#2) | 8.9 (#3) |
| Spec score · Passwordless Authentication Software | 9.2 (#3) | 8.7 (#6) |
| Authentication methods | Supported methods include passwords, social and enterprise identity providers, passkeys and one-time passwords. | The platform supports email/password, passwordless magic links or OTPs, social login, passkeys, MFA, unified login, machine-to-machine authentication, and enterprise multitenancy. |
| Customization | Pages and messages can be customized, while lambdas alter validation, MFA challenge and token transformation behavior and webhooks react to events. | Prebuilt UI components can be customized, and hooks or overrides can add logic before or after authentication APIs. |
| Documentation | Documentation includes API references, installation guides, deployment, security, SDKs, framework quickstarts and operational troubleshooting. | The documentation includes quickstarts, migration guidance, integration guides, API references, security material, and deployment instructions. |
| Funding | FusionAuth announced a $65 million growth-equity investment from Updata Partners on November 1, 2023, its first outside funding after bootstrapping. | Crunchbase lists four seed funding rounds and investors including WestWave Capital and Irregular Expressions, but the displayed dollar amounts are obscured. |
| Integrations | Identity-provider integrations include Apple, Facebook, Google, Twitter and arbitrary OIDC or SAML v2 providers, with connectors, plugins and monitoring integrations also available. | The homepage lists support for JavaScript, Go, Python, React, Angular, Vue, Android, Flutter, and iOS, and says it works with more than 25 frameworks. |
| Licence | The core fusionauth-app bundle is closed-source proprietary software that users may not modify, decompile or reverse engineer. | The public portions of SuperTokens Core are licensed under Apache 2.0, while the ee directory is governed by a separate enterprise licence. |
| Rating on G2 | 4.5 out of 5 from 140 reviews. | 5.0 out of 5 from 1 review. |
| SDKs | Open-source client libraries cover all public REST endpoints and are available for Angular, Go, Java, .NET, PHP, Python, React, Ruby, TypeScript, Vue, Kotlin Android and Swift iOS. | Official backend SDKs are provided for Node.js, Python, and Go, with frontend SDKs for React, vanilla JavaScript, React Native, iOS, Flutter, and Android. |
| Support | Community support is provided through forums, Slack, and GitHub; Essentials includes email support with a 24 to 48 hour business-hours response time, and Enterprise includes 24/7 email and phone support. | Professional support can include migration and implementation assistance, several support channels, and guaranteed response times from 2 hours to 2 days. |
| What it does | FusionAuth is a customer identity and access management server providing authentication, authorization and user management. | SuperTokens provides open-source authentication and session management that runs through an application backend and can be self-hosted or consumed as a managed service. |
Plans
FusionAuth
- CommunityFree
- CommunityFree
- Starter$162 a month
- Starter$162 a month
- Enterprise$2,970 a month
- Enterprise$2,970 a month
- Essentials$2,970 a month
- Essentials$2,970 a month
SuperTokens
- Self-hostedFree
- Self-hosted open sourceFree
- Account Linking add-on$0.01 a month
- Multi-factor authentication add-on$0.01 a month
- Cloud$0.02 a month
- Dashboard users$20 a month
In their own words
FusionAuth
FusionAuth is a Customer Identity and Access Management server for authentication, authorization, and user management. It supports username and password login, passkeys, one-time passwords, and external identity providers, including Apple, Facebook, Google, and Twitter. It implements OAuth 2.0, OpenID Connect, and SAML v2. Authorization includes role-based access across users, roles, groups, applications, and entities, plus fine-grained authorization integration. Teams can customize pages and messages and use lambda functions and webhooks. It can run locally, on-premises, in private or air-gapped cloud environments, or as a managed FusionAuth Cloud instance. The free Community Edition is self-hosted and unlimited, with no trial clock. Starter costs $162 a month billed annually and includes one connector and 100 machine-to-machine entities; Essentials and Enterprise cost $2,970 a month billed annually. FusionAuth supports Android, iOS, Linux, macOS, Windows, web, and API deployments.
SuperTokens
SuperTokens is an open-source authentication provider for developers adding sign-in and session management to applications. It supports email and password, passwordless email or SMS codes, magic links, social login, and passkeys. Enterprise options include tenant-specific login methods, separate user pools, and enterprise SSO. Developers can adapt the prebuilt interface and add logic before or after API operations with hooks and overrides. Backend SDKs communicate with SuperTokens Core; frontend SDKs call authentication routes exposed by the application backend. Core can be self-hosted, with open-source features free at any scale and no MAU limit. A managed Cloud plan is also available, free under 5K MAUs and then $0.02 per MAU. Other paid or sales-led features include multi-tenancy, cross-domain unified login, machine-to-machine authentication, availability zones with uptime SLAs, and Attack Protection Suite. That suite can detect risky authentication activity and prompt extra verification or block attempts. Integrations include Next.js, NestJS, GraphQL, Capacitor, AWS Lambda, Vercel, Hasura, and Supabase. SuperTokens says it is SOC 2 compliant and describes more than 100 controls and tests.