featured · github
SuperTokens: Auth Without the Vendor
Self-hosted authentication that cuts per-user fees, kills lock-in, and ships passwordless by default. Open source, builder-friendly, and actually worth self-hosting.
supertokens/supertokens-core ↗Most SaaS founders reach for Auth0 or Firebase Auth because rolling your own auth is a security nightmare. SuperTokens is the self-hosted middle ground: you get a battle-tested auth system (passwordless, session management, multi-factor) that runs on your own infrastructure. No per-user pricing, no vendor lock-in, and you own the compliance story. It's open source, so you can audit it and customize without fighting API limitations. Trade-off: you're responsible for running and updating it, not outsourcing to a managed service. Worth it if you're scaling, shipping B2B, or need cost predictability.
Share kit
Open source auth that doesn't cost per user
SuperTokens is a self-hosted alternative to Auth0, Firebase Auth, and Cognito. You run it. You own it. No per-user fees, passwordless out of the box, and fine-grained compliance control. Open source, SDKs for most stacks, and a DX that doesn't make you hate auth. Useful today if you're shipping SaaS or need to break free from vendor pricing.
Auth0 and Firebase Auth work until they don't: per-user costs, vendor lock-in, compliance theater. SuperTokens is self-hosted auth that actually plays nice with builders. Open source, passwordless native, no pricing surprises. Worth a look if you're tired of the auth tax.
Most SaaS founders accept auth0's per-user pricing as table stakes. SuperTokens changes the equation: self-hosted, open source, zero per-user fees. Passwordless by default. For teams scaling past the Auth0 comfort zone, it's worth the infrastructure trade-off. Built by builders who got tired of vendor math.
Just integrated SuperTokens into a client's SaaS stack and it shifted how I think about auth infrastructure. Most solo builders reach for Auth0 or Firebase because spinning up auth feels like a tax. But if you're shipping anything that scales, you're paying per user, locked into their pricing tiers, and dependent on their uptime. SuperTokens flips this. Self-hosted, open source, passwordless by default. No per-user fees. You own the data and compliance story. I'm not saying it's a drop-in replacement for everything (Keycloak exists, Ory exists). But the developer experience here is notably tighter. Session management, MFA, social login flows, passwordless email/SMS... all wired in cleanly. The win for me: one builder, one product, zero vendor lock. Install, deploy, move fast. If you're tired of auth eating your margin, worth a look. https://github.com/supertokens/supertokens-core
shipped auth with SuperTokens last week instead of Auth0. self-hosted, passwordless out of box, zero per-user fees, you own the compliance layer. for any solopreneur who's tired of vendor lock and margin bleed, this is the move. https://github.com/supertokens/supertokens-core