Stytch focuses on passwordless authentication—such as magic links, one-time passcodes, and passkeys (WebAuthn)—while Logto provides a broader set of identity and access management (IAM) features.
| Logto Pro | Stytch B2B | Stytch B2C | |
|---|---|---|---|
| Basics | |||
| Base priceThe standard cost before extra token usage and add-ons | $24/mo | MAU usage + feature add-on | MAU usage + feature add-on |
| MAUMaximum number of active users allowed in Logto Cloud platform in a given period (month) | Unlimited* | 10,000 includedthen $0.2/each | 10,000 includedthen $0.02/each |
| TokensOnly access tokens are counted | 50K included$0.08 per 100 extra | - | - |
| Applications | |||
| Total applicationsThe total amount of applications needed for integration | Unlimited* | 1 | 1 |
| Machine-to-machine appsThe application type for M2M authentication | 1 included$8 each extra | 1,000 included external M2M tokens | 1,000 included external M2M tokens |
| OIDC/OAuth 3rd party appsOAuth authorization with a consent screen | $8Each third-party app | - | - |
| SAML appsLogto as a SAML identity provider | $96Each SAML app | - | - |
| API resources | |||
| Resource countThe number of API resources registered in Logto | 3 included$4 each extra | - | - |
| Permission per resourceThe detailed permissions defined under API resources | Unlimited* | - | - |
| UI and branding | |||
| Custom domainsUse your own unique domains. Supports multiple custom domains. | 1 included$48 for up to 10 domains | - | - |
| Hide Logto brandingRemove "Powered by Logto" to spotlight your brand exclusively | ✓ | Customizable branding and experience. $99 | Customizable branding and experience. $99 |
| Custom CSSUser-defined code that modifies the style and appearance of pre-built UI | ✓ | Customizable branding and experience. $99 | Customizable branding and experience. $99 |
| Bring your UIUse your own sign-in UI | ✓ | ✓ | ✓ |
| App logo and faviconCustomize the app logo and favicon | ✓ | - | - |
| Dark modeEnable or disable the dark mode of the sign-in UI | ✓ | - | - |
| InternationalizationMake your product easily adapted to different languages and regions | ✓ | - | - |
| Authentication | |||
| Omni sign-inMulti-app and cross-domain sign in | ✓ | - | - |
| Password sign-inLog in with a secret password, and the password policy is configurable | ✓ | ✓ | ✓ |
| Password policyCustom requirements for passwords | ✓ | ✓ | ✓ |
| Passwordless - Email and SMSLog in with a one-time code sent via email or SMS | ✓ | ✓ | ✓ |
| Email magic linksMagic links for organization member invitation, user invitation, or sign-in | ✓ | ✓ | ✓ |
| Passkey sign-inPasskey as the first authentication factor | ✓ | ✓ | ✓ |
| Email connectorIncluding pre-built email services, SMTP, HTTPS | ✓ | ✓ | ✓ |
| SMS connectorIncluding SMS services, API Gateway | ✓ | ✓ | ✓ |
| Social connectorsLog in through popular social accounts, Google, Github etc | Unlimited* | ✓ | ✓ |
| Enterprise SSOEnterprise customers log in with their own identity provider | $48Each connector | 5 included$125/connection | - |
| Secret VaultStore access and refresh tokens from OAuth/OIDC providers for third-party API access | ✓ | - | - |
| IdP-initiated SSOLet the identity provider log users in directly | ✓ | - | - |
| Multi-factor authenticationPasskeys, authenticator app TOTP, SMS, email and backup codes | $48All factors | Add-on | ✓ |
| ImpersonationAct on behalf of another user identity | ✓ | ✓ | ✓ |
| Personal access tokenSecure token-based access, no credentials required | ✓ | - | - |
| Account linkingPrevent duplicate accounts when users sign in with different methods | ✓ | ✓ | ✓ |
| User management | |||
| User managementManage user authentication, authorization, and attributes directly | ✓ | ✓ | ✓ |
| Account APIBuild a fully custom account center with APIs end users can access directly | ✓ | ✓ | ✓ |
| Collect user profileCustomize sign-up fields to collect additional user information and custom data | ✓ | ✓ | ✓ |
| User rolesDefine user roles and manage access to your system | Unlimited*$32 Global RBAC add-on | Not customizable | - |
| Machine-to-machine rolesDefine machine-to-machine type roles and manage access to your system | Unlimited*$32 Global RBAC add-on | - | - |
| Custom permissionsDefine and customize detailed permissions under each role | Unlimited*$32 Global RBAC add-on | Not customizable | - |
| Security | |||
| Suspend usersSuspend users to block their logins | ✓ | - | - |
| Identifier lockoutLimit login attempts to prevent brute-force attacks | $48 Advanced security add-on | Add-on available | Add-on available |
| Captcha and bot protectionProvide Captcha providers to ensure only real users can sign up | $48 Advanced security add-on | Add-on available | Add-on available |
| Block disposable email addressesBlock login attempts from known disposable email services | $48 Advanced security add-on | - | - |
| Block sub-email addressesBlock sign-ups or sign-ins that use plus-addressed email aliases | $48 Advanced security add-on | - | - |
| Invitation-only sign upRestrict sign-up to invited users | ✓ | - | - |
| Email blocklistBlock users based on specific attributes or domains | $48 Advanced security add-on | - | - |
| Device fingerprintingIdentify a device using system attributes for tracking or fraud detection | - | 10,000 fingerprints$0.005/fingerprint | 10,000 fingerprints$0.005/fingerprint |
| Organizations | |||
| OrganizationA group of users, usually used in multi-tenancy apps | Unlimited*$48 Organizations add-on | - | - |
| Users per organizationThe amount of users under each organization | Unlimited* | - | - |
| InvitationInvite members to join the organization themselves | ✓ | - | - |
| Organization rolesDefine customized roles under organizations | Unlimited* | Not customizable | - |
| Organization permissionsDefine customized permissions under organizations | Unlimited* | Not customizable | - |
| Organization-level MFARequire all members of an organization to enable MFA | ✓ | - | - |
| Just-in-Time provisioningAssign memberships and roles to users when they first sign in | ✓ | - | - |
| Developer and platform | |||
| WebhooksSend real-time data to another system when an event happens | 10 | - | - |
| Audit log retentionHow long user authentication actions are stored for security and support | 14 days | - | - |
| Custom token claimsAdd personalized data to user and machine-to-machine authentication tokens | ✓ | ✓ | ✓ |
| Tenant membersCollaborators who can access and manage the Logto Cloud console | 1 included$8 each extra | Unlimited | Unlimited |
| Developer service, support, and compliance | |||
| Community chat supportAsk questions and share ideas with others in Discord | ✓ | ✓ | ✓ |
| Email ticket supportDirectly reach out to the service team with email communication | (48h) | ✓ | ✓ |
| Discord or Slack private channelReach the service team in a private space | ✓ | - | - |
| Standards & Privacy compliantCompliance practices for security and privacy expectations | ✓ | ✓ | ✓ |
| SOC 2 reportSecurity report for enterprise due diligence | ✓ | ✓ | ✓ |
* "Unlimited" refers to features without a fixed limit, but is subject to system policies to ensure fair usage, security, and optimal performance.
