Pricing
Per-service pricing, not per-seat
Pay for what you protect. Gateway services and enterprise SSO connections drive cost. Users come free until you scale past generous soft limits.
Free
Evaluate AuthDeep with no commitment. 2 services, full local auth stack.
2 services · 10 users hard cap · 7-day audit logs
- 2 gateway services
- 10 users (hard cap)
- Local auth (email + magic link)
- MFA — TOTP & email OTP
- Social login (OAuth2/OIDC)
- API key management (CAK/SAK)
- 5 API keys
- 7-day audit log retention
- LDAP / Active Directory
- SAML 2.0 / WebAuthn
- SSO / OIDC IdP
- Custom domain
Starter
Small teams standardising identity. LDAP, SAML, and passkeys included.
5 services (+$4/extra) · 100 users · 30-day audit logs
- 5 gateway services (+$4 each)
- 100 users (+$0.50/10 overage)
- Local auth + MFA + Social
- LDAP / Active Directory
- SAML 2.0 SP
- WebAuthn / Passkeys
- IP allowlist/blocklist
- 30-day audit log retention
- API key management
- Directory Sync (SCIM)
- Custom domain
- GeoIP restrictions
Growth
Product teams protecting real workloads. Up to 2 enterprise SSO connections.
20 services (+$3/extra) · 500 users · 90-day audit logs
- 20 gateway services (+$3 each)
- 500 users (+$0.30/100 overage)
- Everything in Starter
- 2 SSO / OIDC IdPs (+$25 each extra)
- Directory Sync (SCIM, Entra, Keycloak)
- Custom domain
- GeoIP restrictions
- Audit log export (CSV / JSON)
- 90-day audit log retention
- White-label (logo, colors, CSS)
- Self-hosted license
- Dedicated CSM
Scale
Growing businesses with complex multi-tenant and multi-SSO requirements.
100 services (+$2/extra) · 2,000 users · 365-day audit logs
- 100 gateway services (+$2 each)
- 2,000 users (+$0.20/100 overage)
- Everything in Growth
- 10 SSO / OIDC IdPs (+$18 each extra)
- Unlimited tenants
- White-label (logo, colors, CSS)
- 365-day audit log retention
- Custom HMAC integrations
- Priority support queue
- Self-hosted license
- Dedicated CSM
- 99.99% SLA contract
Enterprise
Unlimited services, self-hosted license, dedicated support, and a contractual SLA.
Unlimited services · Unlimited users · 730-day audit logs
- Unlimited gateway services
- Unlimited users
- Everything in Scale
- Unlimited SSO / OIDC IdPs
- Self-hosted offline license
- 730-day audit log retention
- Dedicated Customer Success Manager
- On-premise / VPC deployment
- Custom SLA contract (99.99% uptime)
- Security review & pen-test support
- HIPAA / SOC2 deployment guidance
- Custom SAML / OIDC integrations
Pricing FAQ
What counts as a service?
Each protected route or API proxy target in AuthDeep's service registry counts as one service.
What counts as an SSO / IdP connection?
Each SAML IdP or enterprise OIDC provider configured under a tenant. Social providers (Google, GitHub, etc.) do not count.
Can I upgrade mid-cycle?
Yes. Admin changes the plan; billing is pro-rated manually. Stripe integration arrives in v0.25.0.
What happens when the trial expires?
The account rolls to Free plan limits automatically. No data is deleted.
Can I run AuthDeep without internet access?
Yes. Enterprise self-hosted licensing works offline with no call-home requirement.
How is billing handled today?
v0.24.0 uses manual activation: you contact us, receive an invoice, and admin activates the plan. Stripe arrives in v0.25.0.