BenchRank
#2 in Identity & Access ManagementUpdated 2026-08

Logto

by Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy

BenchRank score

73.9 — BenchRank score out of 100

Screenshots of Logto

Homepage · Logto

Homepage of Logto

Overview

Logto is auth infrastructure that adds sign-in, enterprise SSO, RBAC and multi-tenant organisations to applications over OAuth 2.1, OIDC and SAML. It ships SDKs for 20+ frameworks, a Management API and a prebuilt sign-in UI. It runs as Logto Cloud in EU, US, Australia and Japan regions, or self-hosted from the open-source project.

Best for
Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Pricing
Free up to 50,000 MAU, then Pro at $24/month plus token usage ($0.08 per 100 tokens over 50K) and per-feature add-ons; Enterprise is contact sales.
Runs on
iOSSelf-hostedCLI

Strengths and trade-offs

Strengths

  • Open-source and self-hostable; free tier covers 50,000 MAU
  • SDKs for 20+ frameworks plus a no-code option
  • OAuth 2.1, OIDC and SAML, with enterprise SSO and organisations
  • SOC 2 Type II; cloud regions in EU, US, Australia and Japan

Trade-offs

  • RBAC, organisations and MFA are paid add-ons on top of the $24 Pro base
  • Free plan caps: 3 apps, 3 social connectors, 3-day audit log retention
  • Tokens beyond 50K billed at $0.08 per 100, so bills vary with usage
  • SLA, premium support and HIPAA/BAA are Enterprise-only

How Logto markets itself

A structured read of the promise, proof and page design on Logto’s captured homepage.

Homepage capture

“Modern auth infrastructure for developers”

  • Angle: Developer-first
  • Hero: Product screenshot

Pricing

Published plans and prices from Logto’s own pricing page.

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

  • MCP support

    Whether an agent can drive the product through the Model Context Protocol, and how much setup that takes.

  • API quality

    Public API surface: machine-readable spec, official SDKs, documented auth, errors, rate limits and versioning.

  • Documentation

    Publicly reachable docs — coverage, freshness, code samples and machine readability.

  • Agent friendliness

    How readable the site is to an automated client: llms.txt, structured data, server-rendered content, crawler access.

  • Pricing transparency

    Whether real prices are published, self-serve signup exists, and usage costs are knowable without a sales call.

  • Changelog

    A public, dated record of what shipped and when — the clearest signal that a product is still alive.

  • Marketing site structure

    Whether the site answers a buyer's questions: clear positioning, the pages that matter, and accessibility.

  • Page speed

    How fast the site loads for real visitors: Chrome UX Report 75th-percentile LCP, INP and CLS, with a Lighthouse mobile run standing in where a site has too little traffic for field data.

  • Operational trust

    Status page and incident history, security disclosure, compliance and data-processing documentation.

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

  • Openness

    Source availability, self-hosting, data export and open standards. Scored and shown, but not part of the composite — paid SaaS is not worse for being paid SaaS.

  • Maintenance

    Release cadence and repository activity. Scored and shown, but not part of the composite — it is only measurable for open repositories.

This doesn’t look right — report a problem with Logto’s score

Where this comes from

The Logto pages BenchRank reads when it scores the product — its documentation, release notes, status and security pages, and its repository where there is one.

Alternatives in Identity & Access Management

  • Ranked 1

    77 — BenchRank score out of 100

    Ory

    Ory · API-first identity and access management, self-hosted or managed

    Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS

  • Ranked 3

    70.9 — BenchRank score out of 100

    Hexclave

    Hexclave · Open-source auth, payments, email and analytics building blocks

    Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.

  • Ranked 4

    70.8 — BenchRank score out of 100

    Hanko

    Hanko · Open-source authentication and user management with passkeys

    Best for: Developer teams wanting open-source passkey and MFA authentication with EU hosting or self-hosting

See all 32 alternatives to Logto

Is this your product?

Claim Logto to manage its profile. Claiming lets you suggest edits to the descriptive fields — it never changes scores or rankings.

Claim this business

Report a problem with this page

Report an issue with Logto