Stytch
Identity platform with passwordless auth, passkeys and bot detection.
As of 13 November 2026, Stytch is free to use. Stytch is an authentication and fraud prevention API supporting passwordless and passkey-based authentication, SAML SSO, multi-factor authentication and AI agent authentication. Softwr lists it under Cybersecurity. Stytch is available on Web, API.
Overview
What Stytch does
Stytch is an identity platform designed for modern application authentication, providing support for passwordless authentication, passkeys, breach-resistant passwords, SAML SSO and OIDC, alongside device-aware multifactor authentication. The platform emphasises developer experience through pre-built frontend components, headless SDKs, and backend APIs, with support for multiple frameworks including Next.js and React. All tiers include unlimited organisations with organisation-level authentication policies, just-in-time provisioning, role-based access control and SCIM support for user provisioning. Unlike traditional identity providers, Stytch includes sophisticated fraud prevention capabilities built-in, including bot detection with 99.99% accuracy, device fingerprinting, invisible CAPTCHA and zero-day device intelligence. The platform is particularly focused on emerging authentication needs, offering native AI agent authentication and authorisation, consent management for agents, and machine-to-machine authentication. This includes support for the Model Context Protocol (MCP) for authenticating AI agents accessing external systems. Stytch operates on a freemium model with a generous free tier including 10,000 monthly active users (both human and AI agent), unlimited organisations, 5 SSO or SCIM connections and 1,000 machine-to-machine tokens. The company emphasises transparent pricing with no hard caps or unexpected pricing cliffs. Stytch was acquired by Twilio in 2024 to strengthen identity capabilities for modern applications.
What people use it for
- Applications prioritising passwordless and passkey authentication
- SaaS platforms requiring AI agent authentication and machine-to-machine flows
- Companies with emerging identity needs such as bot detection and device intelligence
- Organisations building with Next.js and React requiring modern auth patterns
- Applications needing transparent pricing without surprise tiers or feature gating
The honest half
Where it falls short
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Stytch.
- Free tier limited to 10,000 monthly active users; scaling beyond this requires custom pricing negotiation
- Fraud prevention capabilities billed at $0.005 per fingerprint for usage exceeding 10,000 free checks
- Additional SSO or SCIM connections beyond the 5 included in free tier cost $125 each
- Brand customisation and email removal require one-time payment of $99
- HIPAA and advanced fraud protection only available in Enterprise tier
- No native UI builder; requires custom frontend development for fully-branded auth flows
Pricing
What Stytch costs
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Free
Free
- 10,000 monthly active users and AI agents
- Unlimited organisations
- 5 SSO or SCIM connections
- 1,000 machine-to-machine tokens
- Full authentication and authorisation features
- No hard caps or feature gating
Scaled
On request
- Usage-based pricing for users exceeding 10,000
- All free tier features
- Volume discounts available
Enterprise
On request
- Custom pricing
- Discounted volume rates
- Enterprise support SLA
- Private Slack support channel
- Migration assistance
- 99.99% uptime guarantee
Answered, with sources
Questions people ask
Each answer names the page it came from, so you can check it rather than take our word for it.
What is included in Stytch's free tier?
The free tier includes 10,000 monthly active users (human and AI agents), unlimited organisations, 5 SSO or SCIM connections, and 1,000 machine-to-machine tokens with full authentication features.
SourceDoes Stytch support AI agent authentication?
Yes. Stytch provides native AI agent authentication and authorisation, with support for the Model Context Protocol (MCP) for authenticating AI agents accessing external systems.
SourceWhat fraud prevention features does Stytch offer?
Stytch includes bot detection with 99.99% accuracy, device fingerprinting, invisible CAPTCHA, and zero-day device intelligence built into all tiers.
SourceKeep looking
Where to go from Stytch
- Stytch alternativesEvery product people weigh against it
- Stytch pricingPlans, floors and what the tiers exclude
- Stytch badgesWhich rules it meets, and the figure behind each
- All Cybersecurity softwareThe full category
- Best Cybersecurity softwareThe shortlist, and how it was cut
Best Cybersecurity software for
Compare Stytch with
- Cisco Duo
- Transmit Security
- Descope
- Authy
- Entrust Identity as a Service
- VMware Carbon Black
- Feedzai
- NICE Actimize
- Unit21
- DTiQ
- Google Authenticator
- Logto
- LastPass
- Norton 360
- Auth0
- Bitwarden
- Rhombus Systems
- BigID
Other Cybersecurity software
Customer identity platform built around passwordless and fraud signals
Pricing on request11 researched notesTwilio's free authenticator app with encrypted cloud backup, mobile only since the desktop clients were withdrawn in 2024.
Free plan12 researched notesWorkforce and customer authentication from a certificate authority
From $2/mo11 researched notesCloud-delivered endpoint protection and EDR, now owned by Broadcom and positioned alongside Symantec.
10 researched notesReal-time transaction fraud and financial crime detection for banks and payment processors
Pricing on request10 researched notesFinancial crime, risk and compliance suite for regulated institutions
Pricing on request10 researched notesNo-code fraud and AML risk operations platform for fintechs and neobanks
Pricing on request10 researched notesManaged video loss prevention with human auditors for restaurants, convenience stores and retail
Pricing on request12 researched notesFree TOTP two-factor authentication app that gained optional cloud sync in 2023
Free plan8 researched notesOpen-source identity and authentication infrastructure for apps and APIs
Free, then $24/mo8 researched notesCloud-managed cameras, sensors and access control with a per-camera annual licence
From $149/yr12 researched notesData discovery and classification across cloud, on-premise and unstructured stores
Pricing on request12 researched notes
Softwr does not host reviews and shows no star rating for Stytch, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
More on Stytch
Stytch alternatives
What people switch to, and what they give up
Stytch pricing
Every tier, and where the cost actually lands
Compare Stytch
Put it head to head with anything we hold
Stytch badge
Its rating, and an embed for your own site
Best Cybersecurity software alternatives
Large Chinese video platform that US federal buyers and federal contractors cannot lawfully use
quoteManaged video loss prevention with human auditors for restaurants, convenience stores and retail
quoteWorkforce and customer authentication from a certificate authority
Per user per month
Privileged access management, endpoint privilege management and secure remote access
quote
Cloud video surveillance billed per camera per month, where retention length drives the bill more than anything else
Per camera per month
AI video search that runs on cameras you already own, starting near five dollars per camera per month
Per camera per month
Phishing-resistant passwordless authentication with device trust enforced at every login
quote