A plan with your users included. Pay for more only when you grow.
Each plan includes staff accounts, customers and AI agents. Inside those amounts the bill is the same every month. Past them, every rate is published below.
Prices are in US dollars.
Team
$999
a month, billed yearly
Sign-in for your staff and your customers, and your first AI agents.
Included every month
Up to 50 staff accounts
Up to 50 Windows, macOS or Linux devices
Up to 25,000 monthly active users of your application
Up to 50 AI agents
Up to 1M MCP gateway calls a month
Up to 3 connections, of every kind
Unlimited organizations
Audit record kept for 15 days
Email support
Professional
$3,999
a month, billed yearly
Adds enforcement on your clusters, cloud access and server access.
Included every month
Up to 250 staff accounts
Up to 250 Windows, macOS or Linux devices
Up to 50,000 monthly active users of your application
Up to 250 AI agents
Up to 10 protected nodes
Up to 2M MCP gateway calls a month
Up to 5 connections, of every kind
Unlimited organizations
Cloud access: IAM federation into AWS and Google Cloud
Server access with SSH certificates
Audit record kept for 30 days, and export to Splunk
Business-hours support
Enterprise
Custom
The whole platform on a deployment of your own, at volume rates.
How it is priced
No plan fee: only the services you switch on
Rates that fall as volume rises
A platform fee from $42,000 a year
A dedicated tenant, or any cloud of your own
Audit retention you set yourself
A service-level agreement, and support by contract
How the price works
Three rules, and nothing else to learn.
A plan includes a set amount
Staff accounts, their devices, the monthly active users of your application, AI agents and more are included in the plan's price. Inside those amounts, the bill is the same every month.
Past it, you pay for what you add
Each extra unit has a published rate. Nothing is switched off when you pass an amount: the extra is added to the next bill.
At scale, the rate falls
Enterprise has no plan fee. You pay for the services you switch on, at rates that step down as volume rises, on a deployment of your own.
What is included, and what more costs
Eight things are counted. Everything else in a plan has no meter on it.
A monthly active user (MAU) is a person who signs up or signs in to your own application in that month. A plan includes sign-in to as many Windows, macOS or Linux devices as staff accounts, at no further charge. Rates follow the billing period chosen above. The Enterprise column is for an annual contract. A connection is anything your project connects to: an identity provider for single sign-on or SCIM, a webhook, a log destination, a cloud account or an MCP server.
The same things, at other providers' list prices
What Team includes for one price, line by line, at the prices Auth0, Okta and Microsoft publish. Where one of them costs less, that is here too.
Where Auth0 is ahead
A free plan for up to 25,000 monthly users, without multi-factor authentication or roles. Its Enterprise plan carries a 99.99% service-level agreement. AuthFI has no free plan; early-stage companies can apply to the startup program.
Where Okta is ahead
A Starter suite at $6 a user a month for single sign-on and multi-factor authentication alone, which is less than AuthFI Team for a company that needs only that. Its larger suites add workflows and identity governance.
Where Microsoft Entra is ahead
External ID is free for the first 50,000 monthly users, and Entra ID Free comes with a Microsoft cloud subscription. For a company already on Microsoft 365, staff sign-in may cost nothing more.
List prices in US dollars, read from each provider's own pricing page on 11 October 2026: Auth0 pricing, Okta pricing, Microsoft Entra pricing. AuthFI and Auth0 prices are per month; Auth0 bills a year at 11 months' price, and Okta and Microsoft bill yearly, Okta with a minimum of $1,500 a year. Prices change, discounts are common, and no two products match feature for feature, so treat this as a starting point and check the pages. “Not listed” means the provider's pricing page shows no price for it. The names are trademarks of their owners.
Estimate your bill
Start from a plan and enter the amounts you expect. The estimate shows every line, and which plan is cheaper for you.
Start from
Professional includes 50,000 monthly active users, 250 workforce users, 250 devices, 250 AI agents. You only pay extra above those amounts.
Where should it run?
Team and Professional run on AuthFI Cloud. Choose a dedicated or in-your-cloud deployment to price Enterprise.
What your selection costs each month
Team plan (lowest) $2,931
Professional plan $3,999
Services
Single sign-on, a second step, passkeys and directory sync for your employees.
From $3.00 per user a month, falling to $1.80 at volume. 250 included in Professional.
active users
$0 a month
250 active users, inside your plan
Passkey and passwordless sign-in and registration for your customers.
From $0.0100 per user a month, falling to $0.0025 at volume. 50,000 included in Professional.
monthly active users
$0 a month
50,000 monthly active users, inside your plan
Every agent gets its own key and ID. It can never do more than the person it acts for, and one revoke stops it.
From $2.50 per agent a month, falling to $0.60 at volume. 250 included in Professional.
governed agents
$0 a month
250 governed agents, inside your plan
Sign-in and enforcement on each node, with no code changes. Starts in watch-only.
From $49.00 per node a month. 10 included in Professional.
protected nodes
$0 a month
10 protected nodes, inside your plan
Per-tool permissions and approval by a person for AI agent tool calls.
From $12.00 per 1M calls a month. 2 included in Professional.
million calls a month
$0 a month
2 million calls a month, inside your plan
Allow and deny decisions run by AuthFI. Free when decided on your own nodes.
From $4.00 per 1M decisions a month.
A person approves before an agent or an admin runs a risky action.
From $20.00 per 1,000 approvals a month.
Everything your project connects to, counted together: identity providers for SSO and SCIM, webhooks, log destinations, cloud accounts and MCP servers.
From $40.00 per connection a month. 5 included in Professional.
connections
$0 a month
5 connections, inside your plan
Your plan
Professional plan plus extras, AuthFI Cloud, billed yearly
Professional plan
$3,999
Includes 50,000 monthly active users, 250 workforce users, 250 devices and more
Workforce identity
$0
250 active users, inside your plan
Customer identity
$0
50,000 monthly active users, inside your plan
AI agent identity
$0
250 governed agents, inside your plan
Zero-Code on your nodes
$0
10 protected nodes, inside your plan
MCP gateway
$0
2 million calls a month, inside your plan
Connections
$0
5 connections, inside your plan
Billed yearly
$47,988
Monthly equivalent
$3,999 a month
Yearly billing saves $9,597.60 a year compared with monthly.
Prices are in US dollars. GST of 18% is added for companies in India. Emails and texts sent through AuthFI's own sender have a monthly quota; beyond it, connect your own provider. Passkeys, authenticator codes and approvals send no message at all.
List prices, billed in advance. Quarterly and monthly billing cost more than yearly billing. Dedicated and in-your-cloud deployments are annual contracts. Volume tiers apply to each service on its own. Multi-year terms and volume commitments are available through sales.
In every plan.
The pages your people see
Always included, never metered.
Hosted sign-in and sign-up pages
Workspace: a portal for every staff account, with the apps they can open
White-labelled: your name, logo and colours, not ours
A custom domain for sign-in and for the workspace
Emails and texts from AuthFI's sender, up to a monthly quota, or from your own provider
Your own wording for emails and messages
Your own fields on the sign-up form
Identity
The directory and the ways in.
Users, groups, roles and permissions
Organizations for your customers, with no limit on how many
Single sign-on over SAML and OpenID Connect
Provisioning over SCIM
Sign-in with Google, Microsoft, Okta, GitHub and others
Managed Active Directory and LDAP
Sign-in to Windows, macOS and Linux devices, as many as staff accounts
Security
Not an add-on, on any plan.
Multi-factor authentication and passkeys
Lockout after repeated failures from one IP address
Passwords found in known breaches are refused
Live sessions you can see and end
The audit record, chained so tampering shows
The security console: what was refused, and which rules are in force
Access tokens that expire in 15 minutes
Your data
Where it is kept, and who can reach it.
Kept in the region you choose: Virginia or Mumbai
Isolated from every other customer by the database itself
Signing keys of your own, rotated without signing anyone out
Secrets sealed before they are stored, and shown once
Open standards throughout: OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0
What differs by plan.
Parts marked Pilot or In development on their own pages are included in the plan shown, at the stage they are at.
Where it runs
Team and Professional run in one of our two regions. Enterprise can run in any cloud of your own.
Our region
Virginia, USA
AWS, US East
us-east-1Our region
Mumbai, India
Google Cloud, Mumbai
asia-south1Your own cloud
Any cloud
AWS, Google Cloud, Azure, Oracle, or your own data centre. Run by you, or by us inside your boundary.
EnterpriseEarly-stage startup?
Apply for a free plan through the startup program. Three short steps, and someone from our team replies.
Apply to the startup program