OIDC IdP, SAML SSO, MFA, SCIM, risk engine, fine-grained authorization, feature flags, billing, and 340+ API commands in one deployable binary. Never pay per-MAU again.
Every feature that costs extra on Auth0 is included in the self-hosted edition, forever.
We measured these ourselves. All data from public documentation as of 2026.
| Feature | Bastionary | Auth0 | Clerk | Keycloak |
|---|---|---|---|---|
| Self-hosted | ✓ Free | ✗ N/A | ✗ N/A | ✓ Free |
| Cost at 100K MAU | $0 | ~$1,300/mo | ~$600/mo | Ops cost |
| OIDC IdP (full RFC) | ✓ | ✓ | PARTIAL | ✓ |
| SAML SSO + JIT | ✓ | ✓ Paid | ✓ Paid | ✓ |
| SCIM 2.0 | ✓ | ✓ Paid | ✓ Paid | ✓ |
| Risk engine / Adaptive MFA | ✓ | ✓ Paid | ✗ | ✗ |
| Fine-grained authz (FGA) | ✓ | ✓ Paid | ✗ | PARTIAL |
| Billing / licensing built-in | ✓ | ✗ | ✗ | ✗ |
| Feature flags built-in | ✓ | ✗ | ✗ | ✗ |
| Auth hooks (20 triggers) | ✓ | ✓ | ✓ | ✗ |
| 6 language SDKs | ✓ | ✓ | PARTIAL | ✗ |
| Setup time | < 5 min | ~30 min | ~10 min | ~2 hours |
Download and self-host free, forever — no license, no MAU limits, no strings. Pay only if you want us to run it for you.
Cloud hosting is coming soon. Join the waitlist to be first. No credit card required for self-hosted.
Cloud hosting is in private beta. Join the waitlist and get early access + locked-in pricing.
Reach out about pricing, integrations, enterprise deployments, or anything else.