The original comparison ran in March and made the case that identity and access management is the highest-stakes software purchase in enterprise security. That argument hasn't weakened at all in the months since, if anything the stakes around identity infrastructure have only grown as more of the attack surface shifts toward credential theft. What has changed, confirmed directly against all three vendors' live pricing pages for this refresh, is that both Auth0 and Okta restructured their tiers since then, and the changes make the entry-level decision easier than it was in March.
Auth0 Added a New Tier Between Free and Professional
Auth0's pricing page now shows four tiers instead of three: Free at $0, a new Essentials tier at $35/month, Professional at $240/month (unchanged from March), and custom-quoted Enterprise. That Essentials tier didn't exist in the original comparison. It sits at a genuinely useful price point for a small team or early-stage product that's outgrown the free tier's limits but isn't ready to justify a $240/month jump straight to Professional, a gap the original pricing structure left wide open.
Professional's price hasn't moved, still $240/month, still scaling by monthly active users in a way that can surprise a growing SaaS product mid-quarter if nobody's watching the MAU count. That warning from the original comparison holds exactly as written. The new Essentials tier doesn't change Professional's behavior, it just gives teams a cheaper on-ramp before they hit that scaling curve.
Okta Restructured Into Named Suites With Actual Published Prices
Okta's pricing page now organizes Workforce Identity Cloud into named suites with specific starting prices: Starter Suite begins at $6/user/month, and Essentials Suite begins at $17/user/month, both billed annually. That's meaningfully more transparent than the vague "$2-15/user/month" range the original comparison had to cite, Okta's pricing page didn't publish clean tier names and starting prices with that level of specificity in March. Professional and Enterprise suites remain custom-quoted, consistent with how enterprise IAM has always been sold at the top end.
Separately, Okta's Customer Identity product (a distinct line from Workforce Identity, aimed at authenticating your own customers rather than your employees) requires an Enterprise base product starting at $3,000/month billed annually per Okta's pricing page, with add-ons priced on top. That's a real, confirmed number worth knowing if your evaluation is actually about customer-facing authentication rather than employee SSO, a distinction that gets blurred in a lot of "Okta pricing" searches that land on the wrong product line entirely.
Cost at Real Team Size
A 50-person team on Okta Starter Suite pays $300/month ($6 times 50), while the same team on Essentials Suite pays $850/month ($17 times 50), billed annually in both cases. That same team on Auth0 Essentials pays a flat $35/month regardless of headcount up to the tier's user cap, a fundamentally different pricing model, Okta scales per seat while Auth0's lower tiers scale by monthly active users against a flat monthly base rather than a strict per-seat multiplier. Authentik costs nothing beyond server hosting at any headcount on the Open Source tier, or $250/month for that same 50-person team on Enterprise support ($5 times 50).
Scale that same comparison to 500 people, and the gap widens dramatically. Okta Starter Suite at 500 seats runs $3,000/month, Essentials Suite runs $8,500/month, numbers that land in the same range the original March comparison estimated for Okta at enterprise scale, just with clearer tier names attached now. Authentik Enterprise at 500 users runs $2,500/month plus whatever infrastructure and engineering time the self-hosted deployment actually costs, a real number that should factor into any total-cost comparison rather than treating self-hosted as free.
Compliance Certifications Still Separate These Three Sharply
Okta carries the deepest compliance certification list of the three: SOC 2 Type 2, ISO 27001, FedRAMP High authorization, and HIPAA-eligible configurations, credentials that matter directly for government contractors and healthcare organizations with hard compliance requirements. Auth0, under Okta's ownership since the 2021 acquisition, inherits much of that same compliance posture on its higher tiers, though FedRAMP authorization specifically remains an Okta Workforce Identity distinction rather than something Auth0 markets independently.
Authentik carries no third-party compliance certifications at all, consistent with its open-source, self-hosted model, whatever compliance posture your deployment has is entirely a function of how you configure and audit it yourself. For a regulated business that needs a vendor-provided compliance certification to satisfy an auditor, that's a real, unavoidable gap Authentik cannot close no matter how well-configured the deployment is. For a team building its own compliance program on top of infrastructure it fully controls, that same fact reads as a feature rather than a limitation, since there is no vendor-side breach or shared-tenant incident to explain to an auditor after the fact.
Authentik's Pricing Hasn't Moved, and That's the Point
Authentik's pricing page confirms the Open Source tier remains free with unlimited users, and Enterprise support runs $5/user/month, both unchanged from March and matching what's documented in the product's own data. That stability is the actual value proposition for anyone choosing self-hosted IAM in the first place: no MAU-based billing that can surprise you mid-quarter, no vendor restructuring the tier you already budgeted around. The tradeoff hasn't changed either, you own the PostgreSQL and Redis infrastructure, and minor version upgrades have a documented history of breaking flow and policy configurations if release notes get skipped.
What This Actually Changes About the Recommendation
The original verdict doesn't flip, but Auth0's new Essentials tier genuinely improves the entry-level calculus for small teams. A startup that would have jumped straight from Auth0 Free to $240/month Professional in March now has a real $35/month middle option, narrowing (without eliminating) the gap that used to push cost-conscious teams toward Authentik earlier than they might have wanted to.
Okta's restructuring is more about transparency than substance, the $6 and $17 starting points for Starter and Essentials Suites are in the same range the original comparison estimated, just clearly labeled now instead of requiring a sales conversation to pin down. For a 500-person organization, Okta's real cost still lands in the thousands of dollars a month once you're past entry-level suites into Professional or Enterprise, that math hasn't meaningfully changed since March.
The Recommendation, Confirmed
Choose Authentik if your team has the operational maturity to own self-hosted infrastructure and wants to avoid per-MAU or per-seat billing entirely, the $5/user/month Enterprise tier for support is the only real cost beyond your own server. Choose Auth0 if you're a developer-focused team that wants managed identity without Okta's enterprise sales process, the new $35/month Essentials tier is worth serious consideration before jumping to Professional. Choose Okta if you need the deepest enterprise directory integrations, compliance reporting, and lifecycle management, and budget for real enterprise pricing once you're past the entry-level suites, this remains the category where Okta earns its premium over the other two.
For the original deep-dive on when self-hosted identity makes operational sense, the original Authentik vs Auth0 vs Okta comparison covers the full tradeoffs this refresh builds on, and for a broader look at identity management beyond human users, the identity management for machine identities comparison is worth reading if service accounts and API keys are part of your evaluation too.