We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money
Clerk is a hosted user and authentication layer with framework integrations. Replacing it means choosing which parts of that layer you still want a vendor to operate: customer identity, enterprise SSO, or verification. Logto and FusionAuth offer self-hosting paths; WorkOS targets B2B enterprise identity; Ory Network, Stytch and Descope provide hosted identity APIs. Compare pricing against your active-user and feature needs, then plan for changes to your app’s existing auth integration.
01Why people leave Clerk
Costs can jump with active users
A Reddit thread argues that crossing Clerk’s free-tier MAU cap can make the next tier costly for consumer apps with many non-paying users.
Some teams want data control
Reddit commenters cite self-hosting as a way to control user data and customize auth behavior instead of relying on a hosted provider.
Hosted auth is not every team’s choice
Some developers prefer managing auth with their own database and framework; others say a provider saves work on resets, verification and token handling.
02The alternatives, ranked by fit
- Best self-hostable option
LogtoLogtoLogto is an open-source, self-hostable OIDC identity platform for teams that want more control over deployment than Clerk provides. The listed starting price is $24, with a free plan; production costs depend on add-ons. You’ll need to adapt your app’s auth integration to Logto rather than assume a drop-in Clerk replacement.
Trade-off: Production pricing depends on add-ons your app needs.
8.1/10from
$24/mofree plan - Best deploy-anywhere option
FusionAuthFusionAuthFusionAuth is self-hostable and aimed at teams with complex user models or API-led authentication. Its listed starting price is $162, with a free plan. It offers a deployment path beyond a hosted-only setup, but check the closed-source tradeoff and usage terms before committing or planning a migration.
Trade-off: Self-hosting comes with a closed-source tradeoff.
8.0/10from
$162/mofree plan - Best for enterprise SSO
WorkOSWorkOSWorkOS is a hosted identity API for B2B apps that need enterprise SSO, directory provisioning or multi-tenant organizations. Its listed starting price is $65, with a free plan and per-connection enterprise pricing. Choose it for those enterprise identity requirements, not as an assumed one-for-one replacement for every Clerk feature.
Trade-off: Enterprise pricing is per connection.
8.0/10from
$65/mofree plan - Best API-first IAM
Ory NetworkOry NetworkOry Network is managed, API-first IAM for customer identity, including B2B apps needing SSO and SCIM. The listed starting price is $64.17, but its free tier is for development only and production bills are usage-based. Budget against your expected production use and plan to adapt your application’s auth integration.
Trade-off: The free tier is development-only.
7.2/10from
$64.17/mofree plan - Best for B2B identity
StytchStytchStytch offers hosted identity APIs for B2B apps that need organization-level auth, SSO or SCIM, and also targets AI agent identity. It has a free plan, but the listed starting price is n/a. Ask for costs at your expected usage and confirm the migration path before moving off Clerk.
Trade-off: Confirm pricing and migration paths with the vendor.
7.1/10from
Freefree plan - Best for customer identity
DescopeDescopeDescope covers customer identity, tenant-aware B2B identity, and agent authentication and consent. Its listed starting price is $249, with a free plan. It may fit teams replacing Clerk while adding agent identity, but verify deployment options and pricing against your needs before planning the integration change.
Trade-off: Verify deployment details before adoption.
7.2/10from
$249/mofree plan
03Side by side
| Tool | Score | From | Free plan | Best for |
|---|---|---|---|---|
 Clerk Clerk (current) | 7.6 | $20/mo | Yes | Apps using supported frameworks |
| Logto Logto | 8.1 | $24/mo | Yes | Teams building OIDC-based applications |
| FusionAuth FusionAuth | 8.0 | $162/mo | Yes | Teams that need self-hosted identity |
| WorkOS WorkOS | 8.0 | $65/mo | Yes | B2B apps adding enterprise SSO |
| Ory Network Ory Network | 7.2 | $64.17/mo | Yes | Teams building customer identity |
| Stytch Stytch | 7.1 | Free | Yes | B2B apps with organization-level auth |
| Descope Descope | 7.2 | $249/mo | Yes | Teams building customer identity flows |
Questions people ask
Why do developers leave Clerk?
Cost is one reason: a Reddit thread says a high-MAU consumer app can outgrow the free tier without enough paying users to cover the bill. Other developers want to self-host and control user data. Some prefer implementing auth themselves, while others value a provider’s help with security and account workflows.
Which Clerk alternative can I self-host?
Logto is open source and self-hostable. FusionAuth is also self-hostable, but its closed-source tradeoff is worth reviewing. Ory Network is a managed service, while WorkOS, Stytch and Descope are described as hosted options. Check deployment terms and operational requirements before choosing.
How should I estimate the cost of replacing Clerk?
Compare each vendor’s listed starting price and free-plan terms with your expected production usage and required features. Ory Network’s free tier is development-only and production bills are usage-based; Logto costs depend on add-ons. Ask vendors for a quote where pricing is unclear, and include the work to change your app integration.